Collection
Create throwaway PKI for development and testing: root CAs, intermediate CAs, and server or client certificates issued by them. The Decoder trusts your CA certificates when verifying, in addition to the Mozilla root store.
This tool is for development and testing only.
Never generate production keys in a web page such as this.
Keys are generated locally in your browser and kept
unencrypted in this browser's local storage: they never leave this
page, but anything running on this site's origin can read them,
and clearing site data deletes them. Export a copy of anything you
want to keep.
Contents
The collection is empty. Create a root CA below to get started, or import a previously exported collection.
Create a root CA
Issue a certificate
Comma- or space-separated subject alternative names.