Your own Certificate Authority (CA) in ONE simple command

You can find many instructions how to make certificates with OpenSSL. OpenSSL is very good except... it's too complex.

Showcert is OpenSSL for humans, much simpler to use and it has gencert utility to generate certificates. Very easy.

Generate self-signed cert with simple command

gencert example.com www.example.com

This will make self-signed cert. Easy, isn't it?

Your own CA

Generate CA certificate (1 command):

gencert --ca MyCA

Thats all! Now, you can import generated MyCA.pem file to browsers and generate signed certificates for sites:

gencert --cacert MyCA.pem --cakey MyCA.key example.com

What could be simpler?

Install showcert and play for yourself.