I want to create a self-signed certificate that will be installed as a trusted certificate authority.

I then want to create another two certificates which are signed using the private key of the self-signed certificate.

What tools can I use to do this?

I have used Visual Studio's makecert tools but it is a bit limited in that it does not allow you to specify the organisation name and other details.

What other tools can I use?

1 Answer 1


openssl is a very good command line tool that I have used to create self signed certificates. This will allow you to specify the values for each and every field in the certificate and it is available for both Linux and Windows.

basically you can create a self signed certificate using openssl in just one command

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out mycrt.pem -days 1000

This command will generate a keypair and a certificate with a validity of 1000 days.

You can become your own CA (of course your certificates will not be recognized/validated by browsers) and use this self signed certificate to sign other certificates for your personal use.This process will involve following steps using openssl.

  1. Generation of CSR- Certificate Signing Request
  2. Signing the request (as a CA) by using your self-signed certificate
  3. import the CA certificate in the browser under trusted CAs.

here is a good tutorial on creating your own CA model.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .