A small shrink-wrapped library for generating certificates and CRLs for revocation. From a generated root (CA) certificate, it can generate both server and client certificates. It can convert to and from PEM format for both certificates, keys and CRLs. It can convert to and from PKCS12 for client certificates intended for HTTPS with client certificate authentication.