jsha's tracked open-source repos, sorted by stars.
minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.