1.Open Certification Authority 1.1 http://www.openca.org/openca/docs/online/pr01.html Today we support the following things (this is an incomplete list just to give you an impression how complex the subject matter is): Public interface, LDAP interface, RA interface,CA interface, SCEP, OCSP, IP-filters for interfaces, Passphrase based login Certificate based login (incl. smatcards), Role Based Access Control flexible certifcate subjects, flexible certificate extensions PIN based revocation, digital signature based revocation CRL issuing, Warnings for expiring certificates support for nearly every (graphical) browser 1.2 http://www.pyca.de/features.html pyCA tries to make it easier for people to set up and run a organizational certificate authority which fulfills the need for a fairly secure certification processing. The package also tries to reduce administrative tasks and user's frustration by providing a comfortable web interface to users contacting the certificate authority. 1.3 http://www.hohnstaedt.de/xca.html This application is a graphical user interface to OpenSSL, RSA public keys, certificates, signing requests and revokation lists. Xca supports next to the usual PEM and DER format of certificates the import and export of PKCS#12 (aka *.pfx) files and the Certificate import from PKCS#7 files. Certificates can be created by self signing it, by signing it by an other (usually CA) certificate or by signing a PKCS#10 request. Netscape SPKAC is supported since version 0.4.6. The validity dates and x509.v3 extensions can be adjusted to fit ones needs. The use of multiple certificates in CA chains is supported and a tree view of the certificates reflects the dependencies. -------------------------------------------------------------------------------- 2. Free certifikates 2.1 https://www.cacert.org/index.php?id=12 CAcert.org is a community driven, Certificate Authority that issues certificates to the public at large for free. 2.2 http://www.opencerts.com/index.php Welcome to OpenCerts, a completely open and free certificate authority (CA) which embraces the foundation of SSL technology: trust. We believe that trust should not be leveraged by the companies that pay the most money to get their root certificates into the major browsers, rather, it should be explored through knowledge and understanding of the sites involved in this network. -------------------------------------------------------------------------------- 3. Usefull info 3.1 http://www.pseudonym.org/ssl/ssl_ca.html Creating a Certificate Authority 3.2 http://slwww.epfl.ch/SIC/SL/CA/ Set up your own Certification Authority using free software 3.3 http://www.europki.org/ca/root/en_index.html The EuroPKI Top Level Certification Authority is a no-profit organization established to create and develop a pan-european public-key infrastructure (PKI). 3.4. http://sial.org/howto/openssl/ca/ OpenSSL Certificate Authority Setup 3.5. http://www.pki-page.org/ This page contains links to various sites and documents which are related to Public Key Infrastructure (PKI) stuff, especially links to all Certification Authorities (CAs)