Managing external CA Certificates in Vault

We have a scenario that we have to manage external CA certificates including its expiry validation , revoking and distribution among clients.

Is there any idea for managing the external certificates through vault, any help would be appreciated.