I created a program with a graphical user interface to create a simple certificate. This program uses the OpenSSL library. Extract the program from the zip file (below) and run it:
You don’t have to install any dependencies, everything is linked into the program.
If you need more help, here is a video:
Download:
CreateCertGUI_V1_0_0_1.zip (https)
MD5: F5400736E7E38F30D35A02FEB6D99651
SHA256: 82D59AC494FEF1A8B219C591717359712C19E8845D02A457017045A9A4C3D989
And if you are interested, here is the source code:
CreateCertGUI_source_V1_0_0_1.zip (https)
MD5: 790CA083407032434A8DA1FF8AC1E512
SHA256: B15BB8A3504EF56D1C6C84CA181FFB6E5A73956EC79757C62B87B520C136AA2D
Didier Stevens 
[…] If you don’t know how to use the command-line or you don’t want to install OpenSSL to create a simple certificate, I created a tool for Windows that doesn’t require installation: CreateCertGUI. […]
Pingback by Howto: Make Your Own Cert With OpenSSL on Windows | Didier Stevens — Friday 12 August 2016 @ 11:36
[…] Update: if you don’t have access to a machine with OpenSSL, I created a website to generate certs using the procedure described here. Read through the procedure, and then use the website listed at the end. And if you don’t want your private key generated on a server you don’t own, download my tool I created for Windows that doesn’t require installation: CreateCertGUI. […]
Pingback by Howto: Make Your Own Cert With OpenSSL | Didier Stevens — Friday 12 August 2016 @ 11:39
[…] utilizar esta aplicación, lo único que debemos hacer es descargarla desde la página web de su desarrollador (aquí encontraremos también el código fuente, por si no nos fiamos de la aplicación) y […]
Pingback by Crea certificados OpenSSL gratuitos en Windows con CreateCertGUI — Saturday 13 August 2016 @ 8:02
[…] Howto CreateCertGUI: Create Your Own Certificate On Windows (OpenSSL Library) […]
Pingback by Overview of Content Published In August | Didier Stevens — Sunday 18 September 2016 @ 18:36
[…] Tool: CreateCertGUI […]
Pingback by CreateCertGUI | Didier Stevens Videos — Friday 7 October 2016 @ 11:46
Hello. I downloaded your CreateCertGUI, but Windows 10 blocked it as malware, Trojan: Win32/Detplock. I tried a few times with the same results. Could this simple be a false positive?
Comment by apromise — Sunday 27 November 2016 @ 12:05
Check the hash. If it matches, it’s a false positive: https://www.virustotal.com/en/file/144c673fcc6fa6696365ce73c426a4bf1aedb0b4580aa9ecaa8bc9c5aff30fba/analysis/
Comment by Didier Stevens — Sunday 27 November 2016 @ 18:24
how can I convert this .crt file to .pem
Comment by supun — Wednesday 3 May 2017 @ 19:33
What version of OpenSSL is used in the GUI?
Comment by Anonymous — Tuesday 25 July 2017 @ 13:08
OpenSSL 1.0.2h 3 May 2016
Comment by Didier Stevens — Tuesday 25 July 2017 @ 20:04
Hello, great tool, can you add the function SAN…. subject alternative names? future request…
Comment by c-n-s-k-d-e — Wednesday 20 September 2017 @ 18:10
What language did you use in development of the GUI?
Comment by Lizz Huntoon — Thursday 19 October 2017 @ 21:50
C
Comment by Didier Stevens — Sunday 22 October 2017 @ 9:53
Hi Didier. Have you considered updating the generator to include SAN’s? https://support.google.com/chrome/a/answer/7391219?hl=en
Comment by Mark Cooper — Wednesday 25 October 2017 @ 9:58
Hi Didier,
do this kind of certificate generate by CreateCertGUI can be used on a Aruba controller for captive portal purpose?
i genrated a certificate with your Tool, My controler supports .P12 files but i’m unable to upload it.
Thanks for your answer.
Comment by RTC4 — Friday 27 October 2017 @ 10:22
I have no idea.
Comment by Didier Stevens — Sunday 29 October 2017 @ 12:39
It’s on the todo list.
Comment by Didier Stevens — Sunday 29 October 2017 @ 13:23
It’s on the todo list.
Comment by Didier Stevens — Sunday 29 October 2017 @ 13:23
Thanks for this tool!
Comment by Anonymous — Tuesday 21 November 2017 @ 15:39
well done guy
Comment by Anonymous — Wednesday 22 November 2017 @ 12:09
Will there be any support soon for SubjectAltName? As Mark Copper mentioned, Chrome requires that and it would be awesome if you could at this to the program.
Anyways, thanks for the awesome program!
Comment by HEM — Friday 24 November 2017 @ 15:32
Like I replied to Mark, it’s on the todo list.
Comment by Didier Stevens — Saturday 25 November 2017 @ 20:53
[…] Then you need a certificate. For this demo, I’m using a self-signed cert. […]
Pingback by Quickpost: Signing Windows Executables on Kali | Didier Stevens — Monday 24 September 2018 @ 0:00