AutoSSL cert not deleted when disabling

I'm trying to establish whether this is intended behaviour. I logged into WHM on one of my servers yesterday to find that all users had AutoSSL certificates installed. I hadn't enabled it on all users myself. AutoSSL was enabled with cpanel as the provider, but the option was disabled in the feature list.

So my first question is...

If I enable AutoSSL but don't specifically disable it on all users, will certificates be automatically installed for those users?

Secondly, I selected all users and chose to disable them all. I waited 24 hours for the AutoSSL check to run but all the certificates are still installed.

As expected, the log says for each user...

2:12:10 AM “username” does not have the required feature “autossl”.


So, I'm assuming that if you disable AutoSSL for a user, when the check script runs it doesn't delete the certificates for those that have been disabled? I guess that's intended, so you can disable it on a user but allow the remaining time left on the existing cert?

I've now got to manually delete a couple of hundred certs from WHM.

It would be much better if when choosing the option to disable AutoSSL on selected users, there was an option also to delete the certificates too!