April 4th, 2012· New toolbar icons (much nicer)
· Improved CSR processing with the option to modify request details
· Improved command line interface to support certificate revocation
· Added support for CLI generation of a new Root CA
· Fixed bug where Web interface was not switching between multiple CAs correctly
· Fixed bug where CLI was returning incorrect return code if CRL could not be issued
· Updated Java version on Windows platforms
· Updates to support OS-X without using deprecated Apple classes
· Other minor improvements
August 26th, 2011· Improved command line interface to support use of different CAs
· Fixed bug where application crashes if data directory does not have read or write permission
· Fixed installer bug that prevented generation of ics files on Windows
April 5th, 2011· Code refactor and cleanup to better support external data stores
· Improvements to efficiently handle large log files
· Fixed bug where CRL number was not being updated using command line interface
· Improved reliability for managing license details
· Other minor bug fixes and code improvements
September 6th, 2010· Support for extra Subject DN fields (serial number, DN qualifier, locality, state or province, domain components)
· Subject DN structure is now configurable based on certificate type
· Support for including multiple CRL distribution points in certificates
· Support for automatically assigning imported certificates and identities to matching users
· Improved compatibility for importing PEM encoded certificates
· Updated Windows installer to offer current user/all users install option
· Fixed concurrency issues with multiple clients using Web interface simultaneously
· Fixed bug where CRL distribution point extension details were not displayed correctly
· Minor UI improvements and bug fixes
July 10th, 2010· Web application (servlet) interface
· Improved command line interface
February 24th, 2010· Command line interface (see help pages for details)
· Updated toolbar with new icons and search filter
· Subject Alternative Name and Organisational Unit fields can now contain multiple values, separated by semi-colon
· CA management dialog contains a new option to export CA identity to file
· Certificate key length and algorithm settings are now an attribute of certificate type, not default settings
· CA certificates no longer require cRLSign key usage to be set
· Fixed bug where importing a PEM identity file for a user did not import the private key
· Optimisations to support large numbers of users and certificates
· Stability improvements and other minor bug fixes
· Some features are restricted based on license type (for new licenses only, existing licenses are not limited)
November 12th, 2009· Mac OS-X 10.6 support.
· Support for using SubjectAltName certificate extension with DNS Name, IP Address or URI content.
· Uses Java 1.6 or later for improved performance.
· Updated third party library dependencies.
· Fixed bug where user details were written to disk too often in some circumstances.
January 19th, 2009· CA certificates can be re-signed using a third party CA, allowing better integration with an existing PKI
· Certificate Signing Request file processing updated for increased flexibility in handling extension requests
· New edit button for user details to prevent settings from accidentally being changed
· Active users can be deleted without having to first make them inactive
· New users that are accidentally created are automatically removed if no settings are updated
· Importing a PKCS#12 identity file that contains multiple key/certificate pairs will import all pairs
· Fixed problem on Vista where installer incorrectly reports that the program was not installed correctly
· Minor UI improvements
July 14th, 2008· Custom certificate types, both for user and CA certificates
· Improved compatibility of PKCS#12 files
· Support for PKCS#7 (.p7b or .p7c) certificate encoding format
· Support for generating CRL files with PEM encoding
· User notes field for recording comments against user entries
· Compliance with rfc5280 (the successor to rfc3280)
· Fixed bug where certificates that expire in less than 1 day were incorrectly sorted
· Fixed bug where changing data directory and creating a new CA creates the CA in the old directory
· Other minor improvements
April 23rd, 2008· Support for certificate revocation and Certificate Revocation List (CRL) issuing
· Support for processing extension requests in Certificate Signing Request files
· The CA certificate can be exported in PEM format or to a directory
· PEM formatted identity files can optionally also include a copy of the certificate
· Certificate validity can now include a fraction of a day
· Improved performance for handling large numbers of users and certificates
· Improved support for integration with an LDAP directory
· Minor bug fixes and other improvements
March 3rd, 2008· Integration with third party calendar applications for managing certificate expiry dates
· Improved support for working with multiple CAs, including easy switching between CAs
· Certificate details dialog includes new "Advanced" tab with detailed certificate information
· Support for Linux and similar platforms
· Improved compatibility for Certificate Signing Request (CSR) file processing
· Certificate validity can be set to 0 days (useful for generating test certificates)
· Support for all ISO-3166-1 country names in certificates
· Minor UI improvements and bug fixes