Broadly, we are a Microsoft shop and our company manages about 1,500 certificates, mostly for our websites. We are no longer doing self-signed certificates and another contracted company "manages" the certificates, but this doesn't mean they do the full replacement. They stop short of configuring the websites in Windows' IIS to use the new certificates as that does not fall under their pervue.
My question is: How can we efficiently handle the renewal and installation of certificates? Is there some product that will automatically handle renewing a cert, installing it on a machine, and configuring IIS?
I web searched and found products of varying capabilities, but didn't see anything that I understood to handle this.