What is a self-signed certificate?
A self-signed certificate is signed with its own private key instead of being issued by an external certificate authority.
Security
Certificate Creator
Create self-signed X.509 certificates and private keys directly in your browser.
Tool
Certificate Creator
Create self-signed X.509 certificates and private keys directly in your browser.
This tool runs in your browser. Your input is processed locally and is not uploaded.
About this Tool
Use this certificate creator to generate self-signed X.509 certificates for local development, testing and private environments. Configure the subject, validity period, key algorithm and subject alternative names. The result is not automatically trusted and is not a replacement for a publicly trusted production TLS certificate.
Examples
- Create a certificate for localhost
- Create a one-year self-signed certificate
- Add localhost and 127.0.0.1 as subject alternative names
Frequently Asked Questions
Will browsers trust the generated certificate?
Not automatically. The certificate must be manually trusted or added to an appropriate local trust store.
Can it replace a public TLS certificate?
No. Public websites should use certificates issued by a trusted certificate authority.
Related Tools
Public and Private Key Generator
Create exportable asymmetric key pairs directly in your browser.
TOOLRSA Key Generator
Create RSA key pairs locally in PEM, JWK or DER-compatible formats.
TOOLECDSA Key Generator
Create elliptic-curve signing key pairs directly in your browser.
TOOLEd25519 Key Generator
Create compact Ed25519 key pairs for digital signature workflows.
TOOLCSR Generator
Create a CSR from subject details, domain names and a newly generated key pair.
TOOLCSR Decoder
Parse PKCS #10 certificate signing request data directly in your browser.
TOOL