[pfg]

Looks like CloudFlare has an API endpoint for certificate management[1], so this should be possible, though I haven't seen any tooling for this specifically.

[1]: https://api.cloudflare.com/#custom-ssl-for-a-zone-properties