Drop-in replacement for Requests. Automatic HTTP/1.1, HTTP/2, and HTTP/3. WebSocket, and SSE included.

TinyPKI is a lightweight C11/OpenSSL PKI core for constrained IoT and edge networks, combining ECQV implicit certificates, sparse Merkle revocation proofs, MMR issuance transparency, CA-signed checkpoints, t-of-n edge witnesses, and SM2/SM3/SM4 sessions.

Configuration for an openssl PKI infrastructure

Event-driven certificate revocation lab with triple PKI hierarchies (RSA-4096, ECC P-384, ML-DSA-87). Automated Zero Trust response using Dogtag PKI, FreeIPA, Kafka, and Event-Driven Ansible.

Client-side X.509 CRL acceleration framework ensuring 100% accuracy, faster lookups, and reduced storage.

This tool downloads the CCADB Intermediate CRL Lists and subsequent CRLs for all publicly trusted Certificates in Mozilla Firefox, Chrome, .. and checks for Errors.

unofficial Chromium's CRLset monitor

Secure HTTPS client-server communication using X.509 certificates, TLS 1.2+, mTLS, and CRL validation.

Role-based PKI for issuing, storing and revoking X.509 certificates - Spring Boot + Angular, with CRL revocation, envelope-encrypted key storage and TOTP 2FA.

Python CLI tool for checking X.509 certificate revocation status via OCSP and CRL.

CRLSet.js is a lightweight CRLSet parser and verifier in TypeScript for Node.js. It fetches and parses the latest Chrome CRLSet in memory, with support for checking whether a certificate or its issuer has been revoked.

Store Revocation Certificate List on top of Ethereum

Self-hostable web app + CLI for testing OCSP responders and CRL endpoints against RFC 6960 / RFC 5280 and US Federal PKI requirements.