certtool
Generate and manage X.509 certificates, keys, and PKI structures using GnuTLS. tldr-pages
On Linux
Linux
Generate a private key and save it to a file
certtool --generate-privkey --outfile path/to/private.keyIdentifyGenerate a self-signed certificate using a private key and a template file
certtool --generate-self-signed --load-privkey path/to/private.key --template path/to/info.template --outfile path/to/certificate.crtIdentifyGenerate a certificate signing request (CSR)
certtool --generate-request --load-privkey path/to/private.key --template path/to/info.template --outfile path/to/request.csrIdentifyGenerate a certificate authority (CA) certificate
certtool --generate-self-signed --load-privkey path/to/ca.key --template path/to/ca.template --outfile path/to/ca.crtIdentifyVerify a certificate against a CA certificate
certtool --verify --infile path/to/certificate.crt --load-ca-certificate path/to/ca.crtIdentify