CmdID

CmdID / PowerShell / Cmdlets / New

New-SelfSignedCertificate

Creates a new self-signed certificate for testing purposes. Windows Server PowerShell reference

From the Windows Server PowerShell reference 39 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

39 in the Windows Server PowerShell reference
Show its 39 parameters
-AlternateSignatureAlgorithmIndicates that this cmdlet uses RSA-PSS (PKCSv2.1) or an elliptic curve cryptography (ECC) equivalent.
-CertStoreLocationSpecifies the certificate store in which to store the new certificate.
-CloneCertIdentifies the certificate to copy when creating a new certificate.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-ContainerSpecifies the name of the container in which this cmdlet stores the key for the new certificate.
-CurveExportSpecifies how the public key parameters for an elliptic curve key are represented in the new certificate.
-DnsNameSpecifies one or more DNS names to put into the subject alternative name extension of the certificate when a certificate to be copied is not specified via the CloneCert parameter.
-ExistingKeyIndicates that this cmdlet uses an existing key.
-ExtensionSpecifies an array of certificate extensions, as X509Extension objects, that this cmdlet includes in the new certificate.
-FriendlyNameSpecifies a friendly name for the new certificate.
-HardwareKeyUsageSpecifies how a hardware key associated with the new certificate may be used.
-HashAlgorithmSpecifies the name of the hash algorithm to use to sign the new certificate.
-KeyAlgorithmSpecifies the name of the algorithm that creates the asymmetric keys that are associated with the new certificate.
-KeyDescriptionSpecifies a description for the private key that is associated with the new certificate.
-KeyExportPolicySpecifies the policy that governs the export of the private key that is associated with the certificate.
-KeyFriendlyNameSpecifies a friendly name for the private key that is associated with the new certificate.
-KeyLengthSpecifies the length, in bits, of the key that is associated with the new certificate.
-KeyLocationSpecifies the file system location where this cmdlet stores the private keys associated with the new certificate.
-KeyProtectionSpecifies the level of protection required to access the private key that is associated with the certificate.
-KeySpecSpecifies whether the private key associated with the new certificate can be used for signing, encryption, or both.
-KeyUsageSpecifies the key usages set in the key usage extension of the certificate.
-KeyUsagePropertySpecifies the key usages for the key usages property of the private key.
-NotAfterSpecifies the date and time, as a DateTime object, that the certificate expires.
-NotBeforeSpecifies the date and time, as a DateTime object, when the certificate becomes valid.
-PinSpecifies the personal identification number (PIN) used to access the private key of the new certificate.
-ProviderSpecifies the name of the KSP or CSP that this cmdlet uses to create the certificate.
-ReaderSpecifies the name of the smart card reader on which to store the private key for the new certificate.
-SecurityDescriptorSpecifies the private key security descriptor as a FileSecurity object.
-SerialNumberSpecifies a serial number, as a hexadecimal string, that is associated with the new certificate.
-SignerSpecifies a Certificate object with which this cmdlet signs the new certificate.
-SignerPinSpecifies the PIN that is required to access the private key of the certificate that is used to sign the new certificate.
-SignerReaderSpecifies the name of the smart card reader that is used to sign the new certificate.
-SmimeCapabilitiesIndicates that the new certificate includes available encryption algorithms to a Secure/Multipurpose Internet Mail Extensions (S/MIME) capabilities extension.
-SubjectSpecifies the string that appears in the subject of the new certificate.
-SuppressOidSpecifies an array of object identifier (also known as OID) strings that identify default extensions to be removed from the new certificate.
-TestRootIndicates that this cmdlet signs the new certificate by using a built-in test certificate.
-TextExtensionSpecifies an array of certificate extensions, as strings, which this cmdlet includes in the new certificate.
-TypeSpecifies the type of certificate that this cmdlet creates.
-WhatIf, -wiShows what would happen if the cmdlet runs.