Question Possible via cli to reissue certificates with DANE + auto create TLSA records?

[Talistech]

Server operating system version

Ubuntu 22.04.5 LTS

Plesk version and microupdate number

Plesk Obsidian 18.0.73 Update #4

We are currently automating DNSSEC activation for all domains. Most of the process is already automated, but one part still requires manual action.

After enabling DNSSEC and adding the DS records, we still need to reissue the SSL certificates through the Plesk GUI and manually enable DANE support.
When doing this via the GUI, Plesk automatically requests a new certificate and then shows a screen asking you to add several TLSA records, for example:

We are ready to install the SSL/TLS certificate and provide DANE support for this domain.
Before you proceed, make sure that the following TLSA records are added to the DNS zone
and can be resolved externally.

Record type: TLSA
Domain name:
_25._tcp.mail.example.com.
_110._tcp.mail.example.com.
_465._tcp.mail.example.com.
_587._tcp.mail.example.com.
_993._tcp.mail.example.com.
_995._tcp.mail.example.com.

Is there a way to automate this entire step?

In short: I would like to fully automate certificate reissuance (including wildcard certificates), automatically enable DANE support, and have Plesk create the required TLSA records just like it does when using the web interface.

Any guidance or CLI/API references would be greatly appreciated.