Dogtag is a full-featured system, and has been hardened by real-world deployments.
Dogtag supports all aspects of certificate lifecycle management, including
The Dogtag Certificate System can be downloaded for free and set up in less than an hour.
http://pki.fedoraproject.org/wiki/PKI_Main_Page