X.509 v3 certificate support
X.509 v2 CRL fetching via HTTP, LDAP, offline
OCSP
PKIX CMPv2 support
PKCS#7 and PKCS#12 import
PKCS#8 and PKCS#11 key support
MSCAPI support on Windows