The pkinit-nss package implements the PKINIT standard for MIT Kerberos. It does so using the Mozilla NSS library.