Powershell script to renew all web apps' SSL certs that match the given domain

Renew-AzureRmSslCerts.ps1

param(
    [string] $Domain,
    [string] $CertFile,
    [string] $CertPassword
)

# This could all be done with a single PS line but it wasn't pretty!
$ProgressPreference = "SilentlyContinue"
Write-Host Downloading web app details -ForegroundColor Green
$apps = Get-AzureRMWebApp

# Get all of the web apps that have an SSL binding present for the given domain
$renewalApps = $apps | Where-Object { $_.HostNameSslStates | Where-Object { $_.Name.EndsWith(".$($Domain)") } }


foreach ($app in $renewalApps) {
    Write-Host "Updating " -NoNewline
    Write-Host $app.Name -ForegroundColor Green

    # Update each binding that matches the domain with the new cert, maintaining the ssl state for it
    $app.HostNameSslStates `
        | Where-Object { $_.Name.EndsWith(".$($domain)") } `
        | ForEach-Object {
            Write-Host "`tUpdating cert " -NoNewline
            Write-Host $($_.Name) - $($_.SslState) -ForegroundColor Yellow
            $cert = New-AzureRmWebAppSSLBinding -ResourceGroupName $app.ResourceGroup -WebAppName $app.Name -SslState $_.SslState `
                -Name $_.Name -CertificateFilePath $certFile -CertificatePassword $certPassword
    }
}