X.509 v3 certificate support

X.509 v2 CRL fetching via HTTP, LDAP, offline

OCSP

SCEP

PKIX CMPv2 support

PKCS#1 and PKCS#8 private key support

PKCS#7 and PKCS#12 import

MSCAPI support on Windows

SAF and ICSF support on IBM z/OS