Current ReST API has one interface for renewing the Administration Console certificates.

It doesn't have:

1. An interface for creating new certificates.
2. An interface that lists all certificates.
3. An interface for getting any information about the certificates. (Including CSR)
4. An interface for deleting certificates.
5. An interface to assign certificates to keystores.
6. An interface to assign a certificate to a reverse proxy. (as their keystore do not have the ability to rename the certificate)
7. An interface to remove the certificate from an Access Gateway keystore.
8. An interface to delete certificates not associated to any keystore.

Without these, there is no way to automate the certificate renewal.