Well AWS ACM already automates this, so if the renewal period gets shortened, I'm guessing that this will be updated to suit, unless I'm misunderstanding your point.

I hadn't considered the CPU load, but that's a fair point. I'm guessing that a suitable piece of code will utilise specialised hardware, or perhaps leverage the GPU or just in time SSL certificates will become a thing.