mkcert

Generate mkcert certificates for IP addresses and URIs effortlessly. Learn how mkcert automatically adds Subject Alternative Name entries for seamless SSL/TLS configuration.

Learn how to change the default mkcert PKCS12 password 'changeit' by editing source code and rebuilding. Secure your certificate bundles effectively.

Understand mkcert key generation defaults. Learn why mkcert uses RSA 2048 for leaf certificates and RSA 3072 for root CAs, and explore ECDSA alternatives.

Learn to use mkcert certificates with Node.js by setting the NODE_EXTRA_CA_CERTS environment variable. Trust your local development certificates easily.

Control mkcert CA installations by setting the TRUSTSTORES environment variable. Learn to selectively install the mkcert CA into specific trust stores for enhanced security.

Learn to manage multiple CAs with mkcert by setting the CAROOT environment variable for isolated certificate management across projects and testing environments.

Learn how mkcert generates S/MIME certificates for email encryption automatically. Discover how to set up email encryption with mkcert effortlessly, ensuring secure communication for your email addresses.

Discover the limitations of wildcard certificates in mkcert. Learn about single-level DNS labels, second-level patterns, and filename sanitization for filesystem compatibility.

Easily generate certificates from CSRs with mkcert. Learn how to use the -csr flag to create locally trusted development certificates signed by the mkcert root CA.

Generate PKCS12 PFX files with mkcert for legacy apps. Use the -p12 flag for P12 output compatible with Windows and Java. Rename .p12 to .pfx easily.

Learn to generate RSA certificates easily with mkcert. This guide shows how to create 2048-bit RSA certificates and 3072-bit RSA CA keys with simple commands.

Easily generate ECDSA certificates with mkcert using the -ecdsa flag. This guide shows you how to create P-256 leaf certificates with mkcert for secure local development.