This pack of scripts makes SSL updates easy as fuck. Only one machine for updating all of your servers. Script catching and mailing errors for easy diagnostics. You adding domain to it, script by everyday cron will get\renew cert for it, upload it to remote server and restart webserver. As I said, easy as fuck.
Check it out http://le-ssl-robot.blindage.org/