tool to manage the core functions outlined in RFC-3280 for PKI

 CertificateAuthority provides a programmer-friendly implementation of all the
 basic functionality contained in RFC-3280 to implement your own certificate
 authority.
 .
 With this tool, one can generate root certificates, intermediate certificates,
 and terminal certificates; and also generate/manage Certificate Revocation
 Lists (CRLs) and Online Certificate Status Protocol (OCSP) messages.