# kca-core

Pure, I/O-free PKI domain logic for KCA. It knows how to generate and parse
keys, build distinguished names, encode X.509 extensions, issue certificates,
create CSRs and CRLs, apply templates, and convert every supported import and
export format. It has no kaya, database or filesystem dependencies and is
unit-tested in isolation.