I&#x27;m surprised there&#x27;s no &quot;CA-tool-as-a-service&quot; where the CA provides an API (and maybe a CLI tool that uses that API) allowing you to automatically request-and-generate certs from their CA server provided it&#x27;s for a subdomain of a domain you have on your account.