Has tinyca moved? What else to use for a private CA?
Try xca - can generate proper X.509 v3 certificates, has templates for CA, server and client software, can generate CRL - pretty nice and solid software.
Though this question is old, it never received a real answer.
Actually tinyCA was adopted by a new developer and is now available on its new homepage https://tracker.debian.org/pkg/tinyca.