I need a custom ski server for my Public Key Infrastructure.
List of things it needs
Certificate issuance, revocation, and retrieval
Certificate Revocation List (CRL) generation and publishing
Simple Certificate Enrollment Protocol (SCEP)
Local Registration Authority (LRA) for organizational authentication and policies
Encryption key archival and recovery
Smartcard lifecycle management
Token enrollment, on-hold, key recovery, and format
It also needs a website that can verify domains for certain dns records to verify domains and it needs to be able to generate the records.