As a network engineer I deal with digital certificates quite often for EAP-TLS authentication, VPN, and device certificates like on WLC controllers .
Customers that don’t need a public certificate just want a valid certificate loaded on the device to make it work. I used to create certificates with OpenSSL , that is flexible and works great but lacks a GUI.
XCA is a Windows application with a nice GUI and great features to create and manage certificates:
