SelfCertForge, manage root CAs and self-signed certs on macOS/Windows
Details
- External ID
- 48117476
- Source
- HN
- Company
- —
- Product
- SelfCertForge, manage root CAs and self-signed certs on macOS/Windows
- Website domain
- github.com
- Launched
- May 13, 2026
- Cohort
- —
- Upvotes
- 5
- Upvotes percentile
- 0.1147011308562197
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Description
Hi, HN!I recently published SelfCertForge, an open source desktop app for creating and managing self-signed certificates on macOS and Windows:https://github.com/rbonestell/SelfCertForge/I know, I know... this isn't an earth-shattering invention. This came from a place of years of personal annoyance. I’ve been maintaining scripts that wrapped OpenSSL for local certificate workflows: create a long-lived root cert, add it to the trust store, then generate and sign child certificates for local services.The scripts work but the workflow was clunky. Used infrequently enough that it's easy to forget the flags, not much easier to explain to anyone than OpenSSL itself, and irritating to repeat across machines. Every time I'd share them with colleagues and friends there were always questions and feature requests, so I used Claude Code to amplify my UI/UX design skills (well, I can't amplify 0...) and turned the functionality into a cross-platform GUI.SelfCertForge can generate root CAs and add them to the system's trust store, generate and sign child certificates, and export DER, PEM, PFX, and P7B formats. It also supports common X.509 fields like Subject, SANs, and Key Usage.Very important caveat: this is not suitable for production environments or public-facing SSL/TLS.
Enrichment
- Theme
- self-hosted infrastructure and security tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Commercial product
- Normalized one-liner
- root ca and self-signed certificate manager for macos and windows
- Manually corrected
- False
Could you build this?
Yes It is an open-source desktop utility wrapping standard cryptographic libraries (like OpenSSL or standard OS crypto APIs) to generate X.509 certificates and install them into macOS Keychain or Windows CertStore.
Discussion
1 comment analyzed.
Competitors
Other products that read as similar to this one — 50 launches clear the similarity bar, closest 8 shown.
Attention rank: #43 of 51 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 174 days after the earliest competitor.
- I rewrote my 2012 self-signed cert generator in Go · hn · 2026-04-02 · 9 upvotes · similarity 0.54
- PassTheCert-rs · github · 2026-09-09 · 37 upvotes · similarity 0.49
- TLS Certificate Management and PKI · hn · 2026-05-22 · 10 upvotes · similarity 0.46
- Let's Seal · hn · 2026-07-27 · 94 upvotes · similarity 0.42
- CertKit for automating SSL certs to Windows, JKS, and appliances · hn · 2026-04-08 · 7 upvotes · similarity 0.41
- Certo · hn · 2026-08-07 · 17 upvotes · similarity 0.41
- CambiOS · hn · 2026-06-11 · 8 upvotes · similarity 0.39
- Trustmux · hn · 2026-06-21 · 6 upvotes · similarity 0.39
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.