The DutchGrid medium-security Certification Authority uses only open-source software, specifically OpenSSL, that are under continuous scrutiny by the public expect community. It will not itself involve in the development of cryptographic software.