NAME

        - A tool to create X.509 certificates.

SYNOPSIS

       [-rdp]  [-silent]  [-live]  [-format  {  crt | pem | pfx }] [-p password] [-n common_name] [-y years] [-m
       months] [-len length] [-# serial] [-a { md5 | sha1 |  sha256  |  s384  |  sha512  }]  [-path  outputpath]
       [outputname]

DESCRIPTION

       is  a  tool  for  generating  X.509  certificates modeled after the Windows command MakeCert.  aims to be
       command line compatible with MakeCert however not all options are supported or implemented yet.

       Unimplemented features are not described here. They are marked as "Unsupported" in s help.

       In contrast to it's Windows counterpart  does, unless the -live option is given, always creates and  save
       a  certificate.   If  outputname  isn't  set  it  is tried to determine the host name of the computer the
       command is run on.
       Warning: if the file already exists it will be overwritten without asking.

       Without further options the generated certificates have the following properties:

       * 2048 bit long
       * sha256 as hash algorithm
       * the detected host name is used as common name
       * a time stamp is used as serial number
       * validity period of one year
       * saved in the current working directory in crt format

OPTIONS

       -rdp   Dummy parameter. Can be used to quickly generate a certificate  with  default  properties  without
              specifying any further parameters.

       -silent
              Don't print the generated certificate to stdout.

       -f format
              Three formats are supported: crt, pem and pfx.
              crt  outputs  the  key  and the certificate in a separate file each with the file endings .key and
              .crt.
              pem outputs the key and certificate into a single file with the file ending pem.
              And pfx outputs key and certificate into a  pkcs12 file with the ending .pfx.

       -p password
              Password to use if the pfx format is used as format.

       -live  Don't write the key/certificate to disk. When used from the command line this can  be  thought  as
              "dummy" mode.

       -n common_name
              The common name to use in the certificate.

       -m months
              Validity period in months (multiple of 31 days, not clanendar months).

       -y years
              Validity  period  in years (365 days, leap years not accounted). If months and years are specified
              the specified the values are accumulated.

       -len length
              Key length in bits to use.

       -a { md5 | sha1 | sha256 | s384 | sha512 }
              The hashing algorithm to use.

       -# serial
              The serial number to use for the certificate.

       -path  A directory where the certificate should be created in.

       outputname
              The base name of the created file(s). A suffix, the format specific suffix  is  appended  to  this
              name.

EXAMPLES

        -rdp

       Creates  a  certificate  with the default properties, saved to a file in the current working directory in
       crt format named like the host. If the host is named freerdp the created files are called freerdp.key and
       freerdp.crt.

        -len 4096 -a sha384 -path /tmp -# 22 -m 144 -y 1 -format crt mycert

       The command above creates the file /tmp/mycert.pem containing a key and a certificate with  a  length  of
       4096. It will use sha384 as hash algorithm.  The certificate has the serial number 22 and is valid for 12
       years (144 months).

EXIT STATUS

       0      Successful program execution.

       1      Otherwise.

SEE ALSO

       MakeCert help page ⟨https://msdn.microsoft.com/library/windows/desktop/aa386968.aspx⟩

AUTHOR

       FreeRDP <team@freerdp.com>

FreeRDP                                               3.6.3                                        1(2017-01-11)