We should look to use cert-manager, or a library such as certmagic or autocert, for certificate management with RHOSAK. This encompasses:

1. The management of certificates / keys for the enterprise RHOSAK MVP and beyond based upon subdomians of the bf2 domain that is currently in use.
2. Replace the manual creation of certificates for managed environments likely with logic that mimics #1.

At some point if enterprise customers want a fully custom domain name, we'd likely base that solution off of #1 as well - however since there are workarounds available to the customer, this is not an initial concern.