What are the pros and cons of using and external or internal CA for FreeIPA/IdM?  I am trying to decide which to do but having trouble finding a lot of info about why I would want to do one or the other.

Thanks in advance!
--