To be more precise, I meant "is there a way to automatically manage CF certificate from LE". There are many ways to manage local certs (or update things by hand), but if you can't automatically update the CF one, it's going to be a bit of a problem.