Currently wildcard SSL for stations should be renewed manually. When migrated to Scalingo we will be able to renew the cert automatically : https://scalingo.com/blog/wildcard-certs