Shameless plug, there's also https://github.com/linsomniac/rgca https://github.com/linsomniac/rgca I've been using it at work for the last year for our certs a

Shameless plug, there's also https://github.com/linsomniac/rgca https://github.com/linsomniac/rgca I've been using it at work for the last year for our certs and it's been quite nice. It can do pre/post hooks as well, so it directly commits the updated CA serial files to our git repo.