openssl and rfc 5280

[Roger No-Spam]

Hi,

I'm trying to understand if openssl is a good base when implementing a system 
that is to be compliant with rfc 5280. Are there any limitations or missing 
parts in openssl?

Regards Roger