TLS is more than just x509. If you want a tool that "just generates certificates" then it's easy, but if you want an advanced management tool that can do all s

TLS is more than just x509. If you want a tool that "just generates certificates" then it's easy, but if you want an advanced management tool that can do all sorts of things then you will end up with something complex because TLS is complex with a lot of different parts. And yeah, the openssl tool could be designed a lot better, but much of this is a matter of UX and managing complexity, not so much reducing it.