You're right. Updating SSL is the friction point in my current workflow. I just searched to renew certificate automatically and there are some tools you can use along with GitLab Pages. By the way, this is also one of my request features to GitLab Pages to make certificate renewal easily. I hope they hear this.