A modern CA with its keys in a PKCS11 device. PKCS11 CA support ACME and CMC. All certificates (and CA's) have working CRL, OCSP, and CA Issuers fields.
The documentation is here.
bash deploy.shSUNET/pkcs11_ca
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|