A feature I'd like would be creating & managing your own private CA in addition to using letsencrypt for public CAs.