Once you have put the certs into cpanel the first time, have a look in /etc/httpd/conf/httpd.conf for the location of the SSL cert files ( for generic webmail cpanel etc it’s /var/cpanel/ssl/cpanel/mycpanel.pem )
You can then simply update these files when you renew your certificates, and don’t need your root password.