So Patrick recently wrote about Pathfinder, a system we've made, consisting of a daemon and a library, that allows applications to do proper RFC-3280 dynamic path validation. It's easy to use, it follows the standard quite comprehensively, and it works.

Carillon's main focus these days is on helping others do PKI right.