certutil

Manage keys and certificates in both NSS databases and other NSS tokens. More information: <https://manned.org/certutil>.

Install

All systems
curl cmd.cat/certutil.sh
Debian Debian
apt-get install libnss3-tools
Ubuntu
apt-get install libnss3-tools
Alpine
apk add nss
Arch Arch Linux
pacman -S nss
image/svg+xml Kali Linux
apt-get install libnss3-tools
CentOS
yum install nss-tools
Fedora
dnf install nss-tools
Windows (WSL2)
sudo apt-get update sudo apt-get install libnss3-tools
OS X
brew install nss
Raspbian
apt-get install libnss3-tools
Dockerfile
dockerfile.run/certutil
Docker
docker run cmd.cat/certutil certutil powered by Commando

Manage keys and certificates in both NSS databases and other NSS tokens. More information: <https://manned.org/certutil>.

  • Create a new certificate database:
    certutil -N -d .
  • List all certificates in a database:
    certutil -L -d .
  • List all private keys in a database:
    certutil -K -d . -f path/to/password_file.txt
  • Import the signed certificate into the requesters database:
    certutil -A -n "server_certificate" -t ",," -i path/to/file.crt -d .
  • Add subject alternative names to a given certificate:
    certutil -S -f path/to/password_file.txt -d . -t ",," -c "server_certificate" -n "server_name" -g 2048 -s "CN=common_name,O=organization"

© tl;dr; authors and contributors