Difference between revisions of "Certutil"
Jump to navigation
Jump to search
(Created page with " brew install nss") Tags: Mobile web edit, Mobile edit |
|||
| (13 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
| + | Certutil.exe is a command-line program, installed as part of Certificate Services. You can use <code>certutil.exe</code> to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains. | ||
| + | * macOS: <code>brew install [[nss (libraries)|nss]]</code> | ||
| + | * [[Fedora]]/[[RHEL]]: <code>rpm -ivh nss-tools</code> | ||
| − | + | ||
| + | certutil -N -d <database path> | ||
| + | |||
| + | |||
| + | Create a [[CSR]] with [[subject]] <code>[[CN]]=<common name>,O=<realm></code>, for example: | ||
| + | * <code>[[certutil]] -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'</code> | ||
| + | |||
| + | == Related == | ||
| + | * <code>[[elasticsearch-certutil]]</code> | ||
| + | |||
| + | |||
| + | == See also == | ||
| + | * {{mkcert}} | ||
| + | * {{certutil}} | ||
| + | * {{CA}} | ||
| + | |||
| + | [[Category:Computing]] | ||
Latest revision as of 11:01, 28 June 2022
Certutil.exe is a command-line program, installed as part of Certificate Services. You can use certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains.
certutil -N -d <database path>
Create a CSR with subject CN=<common name>,O=<realm>, for example:
certutil -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'
Related[edit]
See also[edit]
mkcert- certutil, nss
- CA, Root Certificates, FreeIPA, PKI, OpenCA, Wildcard certificate,
certtool,certbot(Let's Encrypt),certinfo(Cloudflare), ACME, Boulder,cfssl(Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN),openssl ca, Self signed certificate, CSR,keytool, ACM, KMS,aws acm, IdenTrust, multirootca, cert-manager, ca_cert_identifier
Advertising:
