Automate SSLMate Certificate grabs
Every SSLMate certificate has a permanent URL that keeps the updated cert.
As an example, this is the one for canary.gitlab.com: https://certs.sslmate.com/M1y8XfNmWU9futE3cCZ2/canary.gitlab.com.chained.pem
It does only contain the public certificate (the part every user gets anyways) and NOT the private key.
It would be a great thing to just keep the private key in a databag/vault, and use Chefs file download feature to keep the certificates themselves up2date.