CAUTION: END OF SUPPORT ON 3 JUN 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.

Drop-in replacement for Requests. Automatic HTTP/1.1, HTTP/2, and HTTP/3. WebSocket, and SSE included.

PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.

XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

Cross-platform PDF digital signing tool. JavaFX desktop UI with drag-to-place visible signatures, PKCS#11/PKCS#12 keystores, RFC 3161 timestamping, OCSP/CRL long-term validation, and a scriptable CLI.

Python ASN.1 library with a focus on performance and a pythonic API

⭐ Приложение-сервер для работы с Электронно Цифровой Подписью (ЭЦП) РК

Sockets with pure VB6 impl of TLS encryption

Something could be public patches

A TLS certificate authority with CRL, OCSP, HSM and ACMEv2 support and more.

A comprehensive PKI/Certificate Authority management platform

🐳 VMs are bloat. Dockerise your VAPT environment

wolfSSL JSSE provider and JNI wrapper for SSL/TLS, supporting up to TLS 1.3!

OCSP responder for Hashicorp Vault PKI

An implementation of TLS and related specifications in Common Lisp

Easy-to-use high-level library for PKI-enabled applications

NodePKI is a simple NodeJS based PKI manager for small corporate environments.

Multi-level Certificate Authority Management tool, front-end tool to OpenSSL, written in bash shell.

OCSPChecker provides an automated means to check the OCSP revocation status for a x509 digital certificate.