skz-pki is a Makefile-driven PKI orchestrator for OpenSSL.
- Generates root + intermediate CAs, server certs, and S/MIME identities.
- Idempotent targets cover issuance, revocation lists, and bundle exports.
- TODOs tracked for OCSP stapling helpers and SAN templates.