The Universal Management Suite (UMS) has a built-in TLS/SSL certificate manager to be used with the IGEL Cloud Gateway (ICG). It produces keystore files suited to the ICG installer.
Certificate Signing Options
Running Your Own Private CA with UMS
Importing Your Existing Private CA Files into UMS
Using a Publicly Known CA in UMS