Hashicorp Vault can generate certs via a web form or REST call. Easy to set up and maintain, and it's free.