vimal

I need to manage (create, store and import/export) the digital
Certificates in a web based application.
I know that Sun's keytool can be used to create digital certificates
X.509. But it is command line tool.
Is there any way we can use keytool to create certificates
programmatically using some API (except Runtime.exec())?
Also, there is an open source which allows certificate generation,
BouncyCastle (http://www.bouncycastle.org). Any experience with
BouncyCastle?
I also need to store certificates. I can use KeyStore. Any other
options are available?

Thanks in advance for your help and ideas,
Vimal Gupta