Internal Certificate Automation with bash and openssl
I use a very generic approach for certificate automation as I like to be able to pick-up-an-go to a new system and have things "just work". I created this automation method so easily issue new certs and create a renewal pipeline that is touchless.
Essentially, there is a domain/fqdn path per cert. Each path has a config and script that will be run to generate a new CSR config file.