like, i'm sure pulumi has the APIs to do certificate management for the three major clouds, but you might have to be more specific? (Especially if Azure has several ways to host HTTP applications with different methods of attaching certificates)