CESeCore is a common criteria certified security core. It is a developer library, including support for hardware cryptographic devices, of JEE components and was recently certified at Common Criteria level EAL4+. This talk will give an overview of what CESeCore is and what it can be used for. It will also share experiences about Common Criteria certification, what it is, what's good and what's bad, and challenges involved for open source software.