diff --git a/acertmgr/__init__.py b/acertmgr/__init__.py
index 01b7b1c..5daefa7 100755
--- a/acertmgr/__init__.py
+++ b/acertmgr/__init__.py
@@ -173,6 +173,8 @@ def main():
                         re.escape(runtimeconfig['force_renew'])), config['domains'])):
                 cert_get(config)
 
+        # deploy new certificates after all are renewed
+        for config in domainconfigs:
             for cfg in config['actions']:
                 if not tools.target_is_current(cfg['path'], config['cert_file']):
                     print("Updating '{}' due to newer version".format(cfg['path']))
@@ -186,4 +188,4 @@ def main():
                     output = subprocess.check_output(action, shell=True, stderr=subprocess.STDOUT)
                     print("Executed '{}' successfully: {}".format(action, output))
                 except subprocess.CalledProcessError as e:
-                    print("Execution of '{}' failed with error '{}': {}".format(e.cmd, e.returncode, e.output))
+                    print("Execution of '{}' failed with error '{}': {}".format(e.cmd, e.returncode, e.output))
\ No newline at end of file