CertificateAuthority provides a programmer-friendly implementation of all the basic functionality contained in RFC-3280 to implement your own certificate authority.

With this tool, one can generate root certificates, intermediate certificates, and terminal certificates; and also generate/manage Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) messages.