[Re]generating CA hierarchy

Hi there,

_Sorry for making this an "issue", but I haven't found any better point of contact._

I would like to have a tool where I write down a CA hierarchy in a single human-writable/machine-readable file and can [re]generate certificates, keys, CRLs and what have you from an arbitrary point downwards.

Not exactly sure of the terminology; What I mean by a "CA hierarchy" is a CA (key + cert)
that acts as root for the hierarchy (but could still beexternally supplied, not necessarily a
true root CA) as well as other CAs and server- as well as client-certificates that are
downwards in the hierarchy.

I'm pretty sure a tool like that does not exist, so I was planning on writing it myself.
I was just recently pointed in your direction and found the project pretty interesting.

What I want to know is this:
- Is CFSSL a good choice for the backend part of this project?
- What parts of what I want are actually already implemented in CFSSL?

Also, I'm interested in whether CFSSL actually implements key and certificate generation
itself. My alternative to CFSSL would be OpenSSL and I'd definitely welcome it, if I could
use something that is probably a bit cleaner, written by people who eat their own proverbial
dog food and actually seem competent at what they do…