Skip to content
DOOLS

Root CA Generator

Generate a self-signed Root Certificate Authority for your own PKI infrastructure

Configuration

Key Size (bits)

Warning

Keep the private key secure! Never share it publicly.

Generated Files

Generated certificates will appear here

Installation Guides

Windows

  1. Download the Root CA certificate (.crt file)
  2. Double-click the .crt file
  3. Click "Install Certificate"
  4. Select "Local Machine" and click "Next"
  5. Select "Place all certificates in the following store"
  6. Click "Browse" and select "Trusted Root Certification Authorities"
  7. Click "Next" and then "Finish"
  8. Restart your browser

macOS

  1. Download the Root CA certificate (.crt file)
  2. Double-click the .crt file
  3. Keychain Access will open
  4. Select "System" keychain
  5. Double-click the imported certificate
  6. Expand "Trust" section
  7. Set "When using this certificate" to "Always Trust"
  8. Close the window and enter your password
  9. Restart your browser

Linux

Ubuntu/Debian:

sudo cp root-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

Fedora/RHEL/CentOS:

sudo cp root-ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust

iPhone/iPad

  1. Download the .der file (iOS format)
  2. Tap the downloaded file
  3. Tap "Allow" to download configuration profile
  4. Go to Settings > General > VPN & Device Management
  5. Tap the downloaded profile
  6. Tap "Install" and enter your passcode
  7. Tap "Install" again to confirm
  8. Go to Settings > General > About > Certificate Trust Settings
  9. Enable full trust for your Root CA

Use the .der format for iOS/iPadOS devices