In an "Enterprise" setting, the dev or ops team that needs certificates for internal services often has no direct access to the company's external web site or D

In an "Enterprise" setting, the dev or ops team that needs certificates for internal services often has no direct access to the company's external web site or DNS, which may be owned by some other team like marketing or IT. So the options can boil down to jumping through bureaucratic hoops (if they even exist) for every request, or kludge together some other half-baked system that sorta gets the job done. Ask me how I know.