Unable to add SSL cert for custom domain

[mwpllpz]

For googlers, see the feature request for automatic updates here. Be forewarned, currently with LetsEncrypt the certificates will expire every 90 days and you’ll have to change a text record in your DNS on every update since Okta doesn’t support ACME (yet, hopefully)…

Auto renew custom domain certificates?

LetsEncrypt is suggested as a certificate option, as it should be. But how can we auto renew our certificates if the DNS records have to point to okta through a CNAME record? Will auto renewal work? Will okta auto renew the certificates for me? What then, is the proposed way that I renew my certificates, if not through certbot renew?