There's a massive logical leap between having an API and having certificates on public FTP servers. An API is required for you to have proper infrastructure as

There's a massive logical leap between having an API and having certificates on public FTP servers. An API is required for you to have proper infrastructure as code and leaving any bit to human input other than another validation step in the automated process is waiting for errors to happen (invalid or incorrectly spelled cert info, missing cert chains, wrong cert chains, etc.). Symantec even calls out how much work these companies will have to do because so few of them have a proper certificate management system in place that's come back to bite them.