TLS Cert Chain Resolver is a Go toolkit for building, validating, and inspecting TLS certificate chains. It ships with a CLI application, a composable Model Context Protocol (MCP) server, and helper libraries that emphasize memory efficiency and predictable output formats.

🔐 BundleCraft - A tool for configuring, building, and packaging PKI trust stores.

This package is used for signing the cert in customize.

opinionated TLS client & server PKI management tool

Heimdal

Android PIN Unblocker :: Generate unblock codes for PKI smartcards using your Admin key and phone.

A simple tool written in Go to find out which of your OpenSSL PKI Certificates is expired (soon)

EJBCA® – Open-source public key infrastructure (PKI) and certificate authority (CA) software.

Generate and sign X.509 TLS certificates using the SSH agent

Concept Project based on PKI-Based Secure Email Communication System

Microsoft PIN Tool modified for ActivClient PKI smartcards.

The CSR Generator is a Go package that provides functionality for generating Certificate Signing Requests (CSRs) and private keys. It simplifies the process of creating CSRs with specified common names and Subject Alternative Names (SANs).

The Lost Art of the Makefile: Simple OpenSSL PKI sharing for small teams

Securely sign and verify documents using Public Key Infrastructure (PKI). Whether you’re handling contracts, legal agreements, or sensitive data, our API ensures robust security and compliance. Features: Digital Signatures, certificate management, hash algorithms, timestamping, audit trails.

Use easy-rsa to build and manage a PKI/mTLS CA

Scripts for creating an X.509 CA and using it to create an arbitrary number of client and server certificates

A command line tool for Certificate Transparency