I'm very happy, I finally find a good (web) application to manage a CA, ejbca. It support part of SCEP, can publish certificates to both LDAP / ActiveDirectory (or custom publisher), manage CRL, etc.. You should check the feature list. I don't use in production environnment at this time, but I think I'll do in a very short while. Just the time to be more familiar with it.. Maybe you notice, but it's written in Java (EJB..), but even for people like me who doesn't know at all Application Server, it's easy to deploy following (inline, not the INSTALL-guide.txt which is old) documentation.