easy-rsa is a CLI utility to build and manage a Public Key Infrastructure(PKI). Once the Certificate Authority (CA) is created, you can request and sign certificates, including sub-CAs, and create Certificate Revokation Lists (CRL).