For development and local intranet purposes I am trying to find a decent and free x509 certificate generator. I know there is makecert.exe which is available with the .NET Fx SDK, but I have tried using it and have run into seemingly inexplicable problems.

So are there any free and easy-to-use x509 cert generators which folks can recommend?

  • I assume you're looking for such software that runs on Windows?
    – Undo
    Jun 5, 2014 at 3:30
  • Yes, your assumption is correct: Windows. Jun 5, 2014 at 3:50
  • I have always used TinyCA for that, but a) I'm on Linux, b) I'm not sure whether it's available for Windows, and c) looks like the project has died (projectsite is gone, no update since ~2010 if I checked correctly). But it does its job for me. // Wikipedias X.509 article mentions SSLTools Manager for Windows instead, might be worth a look.
    – Izzy
    Jun 5, 2014 at 7:34

2 Answers 2


I have used XCA for this purpose. It's a complete GUI for managing certificates, keys, signing request and even a production-grade CA.

  • Free and open source
  • Multi-platform (Windows, Linux, Mac)
  • Provides generation of private keys, self-signed certificates, signing request and CRLs
  • Optionally used to manage a whole CA signing authority

I've used myself for testing and home use (nothing serious really), so I'm confident that it fits that purpose. Their site seems to indicate that it can also be used for production uses too.


You can do this with OpenSSL. It will run on Windows.

Directions are here.

This question also shows how.

  • I hope they've fixed the Heartbleed thing!!! :-) Jun 6, 2014 at 17:44
  • @Cyberherbalist Yeah. :-) If you get a new version, you'll be fine. It was a simple coding error. The big problem was folks have bad versions embedded into devices and servers that most don't think to update.
    – kmort
    Jun 6, 2014 at 17:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.