You would first of all add the additional domains to the relevant section.io Application (via the DNS screen) and then once DNS change is complete, make the API (https://aperture.section.io/api/ui/#!/Domain/renewCertificate) to complete provisioning of the certificate.