CA/RA packages for SSL and IPSEC

[Wozz <wozz+firewall-wizards () wookie net>]

Greetings,

  I'm curious as to people's experience with the various Certificate Authority
  packages available.  One thing I've noticed is that most of these packages
  require you to buy a license which includes a certain number of certs, and 
  then you have to pay-per-cert after that number.  This strikes me as kind of 
  silly.  Does anyone know of any good commercial packages that don't structure
  their licensing in this way, or a public domain package (not openssl by 
  itself please, need some sort of web interface) which can issue SSL cert's
  and IPSEC certs and supports CEP for Cisco IPSEC.

  Thanks!