PKI Manager v1.0.0 - Initial Release

🎉 First stable release of PKI Manager - a modern, web-based Public Key Infrastructure management application.

✨ Features

Certificate Authority Management

• ✅ Create self-signed root Certificate Authorities
• ✅ Configurable subject fields (CN, O, OU, C, ST, L)
• ✅ Key algorithm selection (RSA-2048, RSA-4096)
• ✅ Flexible validity periods (1-30 years)
• ✅ CA revocation with reason tracking
• ✅ Export in multiple formats (PEM, CRT, DER, CER)

Certificate Issuance & Management

• ✅ Server Certificates - HTTPS/TLS for web servers and APIs
• ✅ Client Certificates - Client authentication and mTLS
• ✅ Email (S/MIME) - Email encryption and signing
• ✅ Code Signing - Software and code signing
• ✅ Subject Alternative Names (DNS, IP Address, Email)
• ✅ Advanced key algorithms (RSA-2048/4096, ECDSA-P256/P384)
• ✅ Certificate renewal with same parameters
• ✅ Revocation with standard reasons

Export & Download

• ✅ Multiple formats: PEM, CRT, DER, CER
• ✅ Certificate chains (PEM Chain)
• ✅ PKCS#7 (P7B)
• ✅ PKCS#12 with private key (PFX, P12) - password protected
• ✅ Java KeyStore (JKS)
• ✅ Batch download (all formats as ZIP)

Bulk Operations

• ✅ CSV-based bulk certificate creation
• ✅ Flexible field mapping with optional parameters
• ✅ SAN auto-detection (email, IP, DNS)
• ✅ Batch download/renew/revoke/delete

Monitoring & Search

• ✅ Real-time dashboard with PKI statistics
• ✅ Expiration tracking with visual indicators
• ✅ "Expiring Soon" widget
• ✅ Search by Common Name or SAN
• ✅ Filter by CA, status, and certificate type

Security

• ✅ Cosmian KMS integration for secure key storage
• ✅ Password-protected private key exports
• ✅ Audit logging for all operations
• ✅ Revocation tracking with detailed reasons

User Experience

• ✅ Modern, responsive UI with card-based layout
• ✅ Light/Dark theme with system detection
• ✅ Sample data generators for quick testing
• ✅ Form validation with helpful error messages

🏗️ Technology Stack

Backend

• Fastify 5.2 (high-performance HTTP server)
• tRPC v11 (end-to-end type safety)
• SQLite with better-sqlite3 (embedded, portable)
• Drizzle ORM 0.36 (type-safe SQL)
• Cosmian KMS (secure key management)

Frontend

• React 19.2
• TanStack Router 1.133 (file-based, type-safe)
• TanStack Query 5.90 (server state)
• Tailwind CSS 4.1 (utility-first)
• Vite 7.1

📦 Installation

See the README for detailed installation instructions.

📸 Screenshots

Check out the README for comprehensive screenshots of all features.

📄 License

This project is licensed under the Apache License 2.0.

Built with ❤️ using modern web technologies