Enterprise PKI is not hard and has many uses besides issuing certificates to web servers. Any company of 1000+ users or endpoints should just set one up.
I did it multiple times, most recently using YubiHSM as root key store for offline enterprise root CA.
I did it multiple times, most recently using YubiHSM as root key store for offline enterprise root CA.