Certificate Authority

read-only

analyzing…

Select one of the 16 affected eMudhra intermediate CAs. All profiles are compromised and revoked (caCompromise); use them only for lab or trust-store testing.

CA profile

8 CA keys, 16 cross-signed certificates. The selected certificate and private key are shown read-only below.

Embedded CAselected cert + key + chain · read-only

CA certificate (PEM)

CA private key (PEM)

CA chain (PEM)

The selected profile is embedded in the HTML source and cannot be edited. The CA chain includes the issuer intermediates when needed. To add another CA, edit CA_PROFILES in the source.

Domains and IP addresses

One per line or comma-separated. Supports wildcards *.example.com, IPv4 and IPv6.

Subject Alternative Name (SAN)

No domains entered.

Key and validity

Key type

Validity

File name

RSA 2048 · maximum compatibility

Advanced parameterssubject · key usage

Add clientAuth (mTLS) Legacy key format (PKCS#1 / SEC1)

Common Name (CN)

Organization (O)

Organizational Unit (OU)

Country (C)

State / province (ST)

Locality (L)

If CN is empty, the first domain is used. CN is descriptive only: modern clients use SANs exclusively.

consolelocal / offline

// OUTPUT

Artifacts ready for Nginx, Apache, HAProxy, curl.

+--------------------------------------+
|                                      |
|            [ NO SIGNAL ]             |
|                                      |
|   01  inspect the CA                 |
|   02  add domains                    |
|   03  hit generate                   |
|                                      |
|   private key - CSR - CRT            |
|   all in-browser, zero network       |
|                                      |
+--------------------------------------+