Self-signed certificate openssl
Generate self-signed cert + key in one command
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=localhost'
more openssl
all 27 commands →
View certificate details
openssl x509 -in cert.pem -noout -text | grep -E 'Subject:|Issuer:|Not (Before|After)|DNS:'
Check cert expiry
openssl x509 -in cert.pem -noout -dates
Verify cert against CA
openssl verify -CAfile ca.pem cert.pem
Check cert matches key
diff <(openssl x509 -pubkey -noout -in cert.pem) <(openssl pkey -pubout -in key.pem) && echo 'MATCH'
Convert PEM to PKCS#12
openssl pkcs12 -export -in cert.pem -inkey key.pem -certfile ca.pem -out bundle.p12 -name myalias