Hello,
Powershell is your friend : you can rely on PKI (built-in), AD CS Administration and AD CS Deployment modules (later two are available after installing AD CS role on a Windows Server).
You can also use good old certutil.exe utility (built-in).
You may also install a management with GUI and corresponding PKI tools (MMC, Server Manager...). From it you can manage Core servers easily.
Microsoft PKI documentation relies on batch scripts, so you'll need to rework them a little to adapt them to Powershell.
Good luck !
