XCA is intended for creating and managing X.509 certificates, certificate requests, RSA, DSA and EC private keys, Smartcards and CRLs. Everything that is needed for a CA is implemented. All CAs can sign sub-CAs recursively. These certificate chains are shown clearly. For an easy company-wide use there are customiseable templates that can be used for certificate or request generation.

Features:

• Start your own PKI and create all kinds of private keys, certificates, requests or CRLs
• Import and export them in any format like PEM, DER, PKCS#7, PKCS#12
• Use them for your IPsec, OpenVPN, TLS or any other certificate based setup
• Manage your Smart-Cards via PKCS#11 interface
• Export certificates and requests as OpenSSL config file
• Create Subject- and/or Extension- templates to ease issuing similar certs
• Convert existing certificates or requests to templates
• Get the broad support of x509v3 extensions as flexible as OpenSSL but user friendlier
• Adapt the columns to have your important information at a glance