Comment by oneplane

You can in fact get a certificate for 99 per year and use that to generate entitlements that Apple will happily sign CSRs for. It's how we use MicroMDM.