Comment by meepmorp

I've used https://smallstep.com/docs/step-ca/ as a CA internally, works well.