Private CA Builder

Create a test root CA, optional intermediate, and server or client certificates with SANs and IPs, as PEM and .pfx. Runs in your browser.

Labs, internal sites, test environments and home servers often need certificates that no public CA will issue: internal names like app.corp.local, private IP addresses, or client certificates for mutual TLS. Instead of self-signing each one (and clicking through warnings), make your own small CA: a root you trust once on your test machines, an optional intermediate, and as many server and client certificates as you need, ready as PEM and .pfx.