CmdID

CmdID / Commands

step

An easy-to-use CLI tool for building, operating, and automating Public Key Infrastructure (PKI) systems and workflows. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Inspect the contents of a certificate

step certificate inspect path/to/certificate.crtIdentify

Create a root CA certificate and a key (append --no-password --insecure to skip private key password protection)

step certificate create "Example Root CA" path/to/root-ca.crt path/to/root-ca.key --profile root-caIdentify

Generate a certificate for a specific hostname and sign it with the root CA (generating a CSR can be skipped for simplification)

step certificate create hostname.example.com path/to/hostname.crt path/to/hostname.key --profile leaf --ca path/to/root-ca.crt --ca-key path/to/root-ca.keyIdentify

Verify a certificate chain

step certificate verify path/to/hostname.crt --roots path/to/root-ca.crt --verboseIdentify

Convert a PEM format certificate to DER and write it to disk

step certificate format path/to/certificate.pem --out path/to/certificate.derIdentify

Install or uninstall a root certificate in the system's default trust store

step certificate install path/to/root-ca.crtIdentify

Create an RSA/EC private and public keypair (append --no-password --insecure to skip private key password protection)

step crypto keypair path/to/public_key path/to/private_key --kty RSAIdentify

Display help for subcommands

step path --helpIdentify

See also

openssl