[ewanm89]

It is pretty easy to manage your own CA, make a Debian VM, install something like XCA and it is literally click a few buttons to generate and issue certificates and set up certificate authority root certificates.

[ptman]

FreeIPA sets up a CA by default and AD can do it as well (not sure if it's done by default).