X.509 Certificate Creator

Windows application / Version 1.2

A practical workbench for certificates and the keys behind them.

Certificate Creator brings certificate creation, signing, inspection and export into a Windows desktop application, powered by OpenSSL 3.x and Delphi. Cryptographic operations run locally, without an internet connection.

From a key pair to a certificate

RSA and ECC. Choose RSA keys from 2048 to 8192 bits, or NIST P-256, P-384 and P-521 curves.
Self-signed and CA-signed certificates. Create root, intermediate and end-entity certificates.
CSR workflows. Generate certificate signing requests, inspect stored requests and sign them with a CA certificate and key.
Certificate attributes. Configure validity, Basic Constraints, Key Usage, Extended Key Usage and Subject Alternative Names.

A local certificate store

Use a persistent directory to organise certificates and keys. Inspect subjects, issuers, validity, algorithms and private-key presence. Load attributes from an existing certificate or CSR when preparing a new certificate.

Export for your workflow

Export PEM certificates, private keys and optional PKCS#12/PFX packages. Private-key exports can be encrypted.

Version 1.2

This documented release adds dedicated CSR creation and signing, SAN validation, attribute loading and overwrite warnings, along with fixes to validity calculation and improvements to encrypted-key handling.

Read the user manual →

Requirements

Windows 10 or Windows 11, OpenSSL 3.x runtime libraries and write access to the selected certificate-store directory. A 64-bit runtime is recommended.

Get in touch

For availability and questions, contact delphi@ugarbe.de.