Скачать или смотреть Create a Self-Signed Certificate in Windows Using PowerShell ⚡ | 2-Minute Guide

Step-by-step PowerShell commands with explanations.
Generate the Certificate –​
$cert = New-SelfSignedCertificate -DnsName "test.com" -CertStoreLocation "cert:\LocalMachine\My"​

$cert – Variable to store the value​
New-SelfSignedCertificate – PowerShell command​
-DnsName – Certificate Name​
CertStoreLocation - certificate store (This cannot be file path)
Export the Certificate –​
Export-PfxCertificate -Cert $cert -FilePath "D:\test\certificate.pfx" -Password (ConvertTo-SecureString -String "password" -Force -AsPlainText)​

Export-PfxCertificate - PowerShell command​
-Cert – Certificate Location​
-FilePath – where you want to export the certificate​
-Password – Password for .pfx file

Export the Private Key–​
openssl pkcs12 -in "D:\test\certificate.pfx" -nocerts -out "D:\test\privateKey.pem" -nodes -passin pass:password​

-in - Specifies the input .pfx file.​
-nocerts - Tells OpenSSL to only extract the private key, without the certificate.​
-out - Specifies the output file for the private key.​
-nodes - Ensures that the private key is not encrypted.​
-passin – Provide the export password.

Export the Certificate –​

openssl pkcs12 -in "D:\test\certificate.pfx" -clcerts -nokeys -out "D:\test\certificate.pem"-passin pass:password​

-in - Specifies the input .pfx file.​
clcerts option tells OpenSSL to only output the client certificate.​
-nokeys - Tells OpenSSL to only extract the certificate, without the private key.​
-out - Specifies the output file for the PEM file.​
-passin – Provide the export password.

Convert PEM to CRT Format–​

openssl x509 -outform der -in "D:\test\certificate.pem" -out "D:\test\certificate.crt"

#PowerShell
#SelfSignedCertificate
#SSLCertificate
#HTTPS
#CyberSecurity
#WindowsSecurity
#DevOps
#PowerShellScript
#Automation
#ITSecurity
#PKI
#Encryption
#SSL
#TLS
#NetworkSecurity
#WebSecurity
#SSLSetup
#CertificateAuthority
#WindowsAdmin
#TechTutorial