I didn't find CSR creation to be that complicated either, but a lot of people on my team were intimidated by it when we were doing a code signing app.

On the plus side, I was aware of every cert that got set up and several of them were going to be created improperly or for sketchy reasons.