Is custom BIG-IP device certificates renewal via cli or ansible-modules possible?

Thank you for your input. I do use tmsh to set master keys as well (I also wrote an article about that here https://community.f5.com/t5/codeshare/ansible-running-bash-commands-with-bigip-command-module-how-it-s/ta-p/311593).
I hoped there was a more elegant way of achieving my goal by following the ansible way of life.