I saw this tidbit tucked away in the About the macOS Sierra 10.12.4 Update page:
https://support.apple.com/en-us/HT204836 This has me very excited. I can't wait to see if it's true and how well it works. I hate having to manually "renew" computer certs which is really just requesting a new one and then deleting the old one with the same name so the computer doesn't get confused by which one to try.