I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates.
I was going to use OpenSSL, but it isn't great for automation and I had issues where the certificate didn't include an anchor, and the alternative DNS names didnt work. Now I need a more reliable solution.
Is there a good Linux-compatible Certificate issuing software/implementation with support for subjectAltNames, <- alternative DNS names, fairly good automation features, reliable certificate output, key generation up to 8192 bits RSA, AES256-encrypted keys, RootCA/IntermediateCA support (being able to sign Intermediate Certs with a Root CA, and having multiple Intermediates for DV,OV and EV), being able to choose with what Intemediate you want to sign the server certificate, OCSP support, CRL support, and working anchors inside certificates?
Of course, if the CA gets big, I will get devs to make me a custom implementation made for my needs, but right now, I need a pre-existing solution that is not OpenSSL or a fork of it. It should preferably be free.