Certutil

• macOS: brew install nss
• Fedora/RHEL: rpm -ivh nss-tools

certutil -N -d <database path>

Create a CSR with subject CN=<common name>,O=<realm>, for example:

• certutil -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'

See also

• mkcert
• certutil, nss
• CA, Root Certificates, FreeIPA, PKI, OpenCA, Wildcard certificate, certtool, certbot (Let's Encrypt), certinfo (Cloudflare), ACME, Boulder, cfssl (Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN), openssl ca, Self signed certificate, CSR, keytool, ACM, KMS, aws acm, IdenTrust, multirootca, cert-manager, ca_cert_identifier