Certutil

Certutil.exe is a command-line program, installed as part of Certificate Services. You can use certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains.

• macOS: brew install nss
• Fedora/RHEL: rpm -ivh nss-tools

certutil -N -d <database path>

Create a CSR with subject CN=<common name>,O=<realm>, for example:

• certutil -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'

Related

• elasticsearch-certutil

See also

• mkcert
• certutil, nss
• CA, FreeIPA, PKI, OpenCA, Wildcard certificate, certtool, certbot (Let's Encrypt), certinfo (Cloudflare), ACME, Boulder, cfssl (Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN), openssl ca, Self signed certificate, CSR, keytool, ACM, KMS, aws acm, IdenTrust, multirootca, cert-manager