I've used Windows Server for PKI (way overkill), I've used FreeNAS, I've used OpenSSL at the command line. I'm looking for a better solution that isn't tied to LetsEncrypt, as I want it to be a fully internal CA. I'll probably run it in its own encrypted VM that will remain powered off 99% of the time once I've issued my certs, so I'm not looking to run it in a container.

Anyone got a good relatively simple web UI solution?