Library and CLI for generating and validating X.509 certificates, certificate authorities, CRLs, and OCSP responses.