Currently the only two methods for Certificate management are to upload certs and CAs via the console or make a script to upload the cert via an API call.
It would be ideal if the CE Node could use an ACME client, to communicate with a private CA server on the local network for issuing certificates.