The certificates should be renewing well before expiration. If you have control over the service you can change the SSL provider from the cPanel one to Let’s Encrypt.
Alternatively you can get a paid certificate for around $10/year and only do it once every 1 to 3 years.