There's already mature, widely adopted tools like certbot and acme.sh that do this automatically for you.

It may not be zero, but it's no more than Comodo.