Thanks for the great work on this package! I'd like to suggest either moving the scep package to it's own repo or moving the server, client and cmd packages out of this one. The main motivations for this are:

• reduce code footprint for code & security audit purposes
• enforce strong separation of concerns between scep package primitives and their consumers