I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our environment has outgrown our deployment script and I need a better way to manage and audit certificates in the domain (list of certificates on each server, when certificates will expire, install certificates on newly deployed servers).
My initial research pointed me to Active Directory Certificate Services (ADCS) as a solution. This seems like it would work fine acting as its own CA where the certificates were generated on the ADCS machine, but it is not clear to me how one would use ADCS with third-party certificates. Is is even possible or recommended?