Editing Public key infrastructure (section)

== Open source implementations ==
* [[OpenSSL]] is the simplest form of CA and tool for PKI. It is a toolkit, developed in C, that is included in all major [[Linux]] distributions, and can be used both to build your own (simple) CA and to PKI-enable applications. ([[Apache Software License|Apache licensed]])
* [[EJBCA]] is a full-featured, enterprise-grade, CA implementation developed in [[Java (programming language)|Java]]. It can be used to set up a CA both for internal use and as a service. ([[LGPL|LGPL licensed]])
* XiPKI,<ref>{{cite web|url=https://github.com/xipki/xipki |title=xipki/xipki · GitHub |publisher=Github.com |access-date=2016-10-17}}</ref> CA and OCSP responder. With [[SHA-3]] support, implemented in [[Java (programming language)|Java]]. ([[Apache Software License|Apache licensed]])
* XCA<ref>{{cite web |last=Hohnstädt |first=Christian |title=X - Certificate and Key management |url=https://hohnstaedt.de/xca/ |access-date=2023-12-29 |website=hohnstaedt.de}}</ref> is a graphical interface, and database. XCA uses OpenSSL for the underlying PKI operations.
* DogTag is a full featured CA developed and maintained as part of the [[Fedora Project]].
* CFSSL<ref>{{cite web|url=https://blog.cloudflare.com/introducing-cfssl/|title=Introducing CFSSL - Cloudflare's PKI toolkit|publisher=CloudFlare|website=CloudFlare's Blog|last=Sullivan|first=Nick|date=10 July 2014|access-date=18 April 2018}}</ref><ref>{{cite web|url=https://github.com/cloudflare/cfssl|title=cloudflare/cfssl · GitHub|publisher=Github.com|access-date=18 April 2018}}</ref> open source toolkit developed by [[CloudFlare]] for signing, verifying, and bundling TLS certificates. ([[BSD licenses#2-clause|BSD 2-clause licensed]])
* Vault<ref>{{cite web|url=https://github.com/hashicorp/vault|title=hashicorp/vault · GitHub|publisher=Github.com|access-date=18 April 2018}}</ref> tool for securely managing secrets (TLS certificates included) developed by [[HashiCorp]]. ([[Mozilla Public License|Mozilla Public License 2.0 licensed]])
* Boulder, an [[Automated Certificate Management Environment|ACME]]-based CA written in [[Go (programming language)|Go]]. Boulder is the software that runs [[Let's Encrypt]].