What about something like step-ca? I got the free version working easily on my home network.

https://smallstep.com/docs/step-ca/

Not everything that's easy to do on a home network is easy to do on a corporate network. The biggest problem with corporate CAs is how to emit new certificates for a new device in a secure way, a problem which simply doesn't exist on a home network where you have one or at most a handful of people needing new certs to be emitted.