Customizable public key infrastructure and development tool for same

A system to administer issuance and maintenance of certificates requested by one or more clients and used by said clients in communications across a network, said system comprising a certification authority and a portal communicably interposed between said certification authority and said clients, said system comprising at least one processor and at least one computer readable medium storing computer executable instructions for operating said certification authority and said portal using said at least one processor for generating certificates used in communications across said network, said at least one computer readable medium comprising instructions for:

• receiving at said portal, a request for a certificate from a client;
• said portal scheduling said request and processing said request using a first policy engine in accordance with a first set of predefined protocols and thereby offload processing tasks from a certification authority, said first policy engine allowing policies to be defined and modified, said policies comprising a set of rules that define how a system operates;
• said portal determining whether to approve or deny said request according to said first set of predefined protocols, said portal configured to provide multiple protocol handling to accommodate different client types and configured to translate protocol requests and relay back protocol responses between said clients and said certification authority;
• for an approved request, said portal requesting a certificate from said certification authority;
• said certification authority receiving said request from said portal and generating said certificate according to a second set of predefined policies using a second policy engine to complete processing in generation of said certificate, said certification authority being configured to issue certificates through said portal and to store certificates in a directory;
• said certification authority issuing said certificate to said portal;
• and
• said portal providing said certificate to said client;
• wherein each of said policy engines includes at least one policy configured as a software component to perform the discrete functions associated with said policy and to generate a notification in response to a change in state upon completion of said policy to enable policies to be defined and modified to provide flexibility in said public key infrastructure.