EJBCA. PKI by PrimeKey
EJBCA is open-source public key infrastructure (PKI) certificate authority software.
EJBCA supports the major standards in the PKI area, such as X.509, OCSP, CMP, XKMS, SCEP, and Elliptic curves, including the new Card Verifiable Certificate (CVC) EU standard for machine readable passports containing fingerprints, which will be mandatory as of June 26, 2009.
EJBCA supports all common asymmetric encryption algorithms, RSA, DSA and ECC, as well as the modern hash algorithms, SHA1, SHA256, SHA384, SHA512.