Let's Encrypt has a public API for managing certificates. One use case where this is handy is for creating/modifying certificates for each customer-controlled domain/subdomain of your multi-tenant web service.