FWIW, it is rapidly becoming the right choice to operate an internal trusted certificate authority, as browsers aggressively push HTTPS. In part, because this

FWIW, it is rapidly becoming the right choice to operate an internal trusted certificate authority, as browsers aggressively push HTTPS. In part, because this is now needed to monitor your own network traffic at the edge.