FYI CyberArk Cert Manager (former Venafi) does this - maybe yours is cheaper?