I just came across these excellent tool - XCA.
https://hohnstaedt.de/xca/
It is a free Windows tool that lets administrators run a CA - easily. You can easily create certificates for your users for WiFi authentication, process CSRs, export in all the common formats, and have the database shared amongst your support people - so anyone can generate the certificates.
Amazing.