Matthias Wessendorf I'm not sure this is an UPS issue to be honest. Any SSL cert is supported as soon as it is trusted (i.e. signing CA is inside the truststore).
A job that automatically renews the certificate would be an ad-hoc implementation that I think should be 'done' ad-hoc' for the particular user.