PKI - Short lived certificates & distribution

Perfect! Exactly what I needed, it’s often just knowing the names of these tools.
Both look like good options.

It’s an on-prem deploy, so I’m without much of the scaffording of cloud orchastrators. But good to know best practices for the future.