¡Esta es una revisión vieja del documento!

xca - X Certificate and Key management

Herramienta para la creación y administración de certificados X.509 y petición de certificados. Implementa cualquier cosa que se necesite para una CA (Autoridad Certificadora)

Disponible para Linux, macOS y Windows.

Características

  Start your own PKI and create all kinds of private keys, certificates, requests or CRLs
  Import and export them in any format like PEM, DER, PKCS#7, PKCS#12
  Use them for your IPsec, OpenVPN, TLS or any other certificate based setup
  Manage your Smart-Cards via PKCS#11 interface
  Export certificates and requests as OpenSSL config file
  Create Subject- and/or Extension- templates to ease issuing similar certs
  Convert existing certificates or requests to templates
  Get the broad support of x509v3 extensions as flexible as OpenSSL but user friendlier
  Adapt the columns to have your important information at a glance

Standards

  PKCS#1 unencrypted RSA key storage format.
  PKCS#7 Collection of public certificates.
  PKCS#8 Encrypted private key format for RSA DSA EC keys.
  PKCS#10 Certificate signing request.
  PKCS#11  Security token / Smart card / HSM access.
  PKCS#12 Certificate, Private key and probably a CA chain.

File formats

  DER Distinguished Encoding Rules - Binary format
  PEM Privacy Enhanced Mail - Text format
  SSH2 Public key

Usability

  Templates for common subjects and extensions.
  All subject entries, x509v3 extensions, and other properties can be displayed in separate columns.
  Customizable subject entries
  Drag & Drop support
  Many certificate setting sanity checks
  Easy association and transformation between keys, certificates and requests