mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

Runs as mkcert|macOS, Linux, Windows|github.com

Command form

ai-draft · 2 tasks · 7 fields

Create a locally-trusted development certificate for one or more names. Installing the local CA (-install) and -csr are left out. Options must come before the names.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui mkcert

Issue a local certificateExample values, fixed in this page — nothing here reaches a terminal

Basic

Domains, IPs or emails*

localhoststring

TasksEach one presets the form for one job

Certificate for localhost

names

Certificate with named output files

cert_filekey_filenames

ParametersOnly these flags are editable in the form

Certificate output file

path

-cert-file

Key output file

path

-key-file

PKCS #12 output file

path

-p12-file

Client authentication certificate

boolean

-client

ECDSA key

boolean

-ecdsa

Also write a .p12 / .pfx file

boolean

-pkcs12

Domains, IPs or emails

For example example.com, *.example.com, localhost, 127.0.0.1, ::1.
string · positional 0 · repeatable

SourcesEvery flag above is checked against these

readme

$ mkcert example.com "*.example.com" example.test localhost 127.0.0.1 ::1 -cert-file FILE, -key-file FILE, -p12-file FILE Customize the output paths. -client Generate a certificate for client authentication. -ecdsa Generate a certificate with an ECDSA key. -pkcs12 Generate a ".p12" PKCS #12 file, also know as a ".pfx" file, > **Note:*…

manualmaster

github.com

Before it fills your prompt, Otty checks the installed mkcert against its version. A form that does not match your version is not offered.