SSL certificate automation

I don't know of any tool but you could think of using a wild card cert if possible.

Also does your CA allow auto enrollment or generation of certificates? You could script writing out a whole bunch of CSR but you would have to find out if your CA is able to accommodate requesting a certificate like this. If so then just writing simple shell scripts you should be able to generate a CSR, send the request to the CA, import the certificate via tmsh then modify the virtual to use the new cert.

Just a theory and I have not tested any of this so you will need to investigate in your environment.

Seth