The AEP Net CA hardware Host Security Module provides the Key Storage, Management and Certification Authority services for the AEP Net family of products. The product processes PKCS#10 certificate requests and issues X.509V3 certificates using CESG generated signing keys. Certificates are written to an industry standard LDAP. AEP Net CA can also revoke certificates and sign and publish an industry standard Certificate Revocation List (CRL) to LDAP. Editing tools are provided for the population and management of generic certificate extension fields.