Multi-cluster certificates rotation and cert-manager

I was trying the self-signed certs in the istio tutorials: Istioldie 1.14 / Plug in CA Certificates

Now I’m searching for alternatives for a production environment. I would like something free and automated to rotacionate this certificates.

I was thinking about cert-manager, something like this: Securing the istio Service Mesh using cert-manager - cert-manager Documentation

Can someone suggest some alternatives? Or even tutorials to this alternatives?