On pfsense, its basically a mini wizard, if even that, all done in a gui. You only need to make the CA once, then you make each certificate based on that CA. Its something that if you have never done before, might seem scary, but once you know how to do it, its easy and quick.
In a CLI its not particularly difficult either, and arguably easier if you have a script to automate it. Just that CLI has a higher learning curve.
I remember watching a video revk made demonstrating automated signed certificates on firebrick's, on youtube somewhere, so that would perhaps solve your firebrick issue as I think its a built in feature on it.