xca

Some smartcard support would be excellent feature for
windows domains:

Extended key usage:
Smart Card Logon(1.3.6.1.4.1.311.20.2.2)

and (Easier?) way to add User Principal Name (UIP) to
subject alternative name:

Subject Alternative Name = Other Name: Principal Name=
(UPN).

For example:
UPN = user1@name.com
The UPN OtherName OID is : "1.3.6.1.4.1.311.20.2.3"
The UPN OtherName value: Must be ASN1-encoded UTF8
string

XCA really keeps getting better and better. Excellent
work, thanks so much.

Some specifications:
http://support.microsoft.com/default.aspx?scid=http:
//support.microsoft.com:
80/support/kb/articles/Q281/2/45.ASP&NoWebContent=1