Apple Managed Device Attestation without a commercial CA Issue hardware-bound ACME certificates to Apple Silicon Macs enrolled in Fleet, using a self-hosted open-source CA. No commercial CA required.