Unfortunately, we've had to switch to a new certificate supplier, and I have about 100 certificates that were originally issued using certbot with our previous provider.
Is there a way to configure these so they automatically renew with the new supplier upon expiry? Or will I need to manually reissue each certificate as they approach expiration to transition them to the new provider?
not sure if it will work as it's just theory-crafting and I never tried it, but how about first register account and edit cronjob to add --server 'new ca here' option to certbot renew?
Batch updating the CA would be a good standard feature for ACME clients to have because sometimes there might be a good reason to have to switch CA. In Certify The Web (which I develop) you can have multiple CA accounts and nominate a current preferred CA, with fallback to others if orders start to have problems.
Certbot can perfectly handle multiple servers and thus multiple accounts (just a single account per server though). It only does not out of the box support easy transition from one CA to another for the same certificate "lineage". Although I guess running Certbot with --server and --force-renewal should be easy enough It's not automated though, that's for sure.
Clients have two possible behaviours when doing that, they can replace the certificate or get a separate one
You can usually replace the certificate, but not every client lets you keep both. Certbot saves certificates by --cert-name, acme.sh and lego by domain name, caddy by acme account and domain name, etc...