With this approach, uploading the certificate via the administration console is the best way to add one when required. The metadata will be picked up at the next refresh point - either the next day, the next publish, or the next time to restart Apache (e.g.
sudo service httpd graceful), whichever is sooner.
Advantages: you do not have to maintain an accessible location for the metadata.
Disadvantages: as and when the metadata changes, you will need to update it manually on each runtime.