Framework for managing digital certificates and public-private key pairs. Includes CAs, registration authorities, certificate repositories, and revocation mechanisms.