krzee ecrist has made a perl tool for managing ssl certs (replacement for easy-rsa) if you use freebsd, it is in ports otherwise, you can get it from subversion. svn co https://www.secure-computing.net/svn/trunk/ssl-admin