Certy provides an easy way to manage X.509 certificates and their private keys through a web interface. Using Certy, you have the ability to:
- Create root Certificate Authorities
- View certificate attributes
- Create intermediate certificates signed by the root CAs
- Export certificates and keys in PEM and PKCS#12 formats
- Validate certificates and certificate chains
- Do all of this with a choice of light or dark theme!
Here are some images of Certy in action:
To download the application, visit the releases page and select the file that matches your platform.
To run the application on Linux with systemd, use the "install" and "start" subcommands:
sudo ./certy install
sudo ./certy start
On Windows, use an elevated command prompt to run:
.\certy.exe install
.\certy.exe start
This will install and start Certy as a Windows Service.
Note: running Certy on Windows is possible but not recommended since file & folder permissions are not yet correctly set during certificate creation. This will eventually be fixed but is a security issue in the meantime. Linux is not affected by this.
In addition to running as a standalone service, Certy can run in a Docker container. The command for launching Certy in Docker looks something like this:
docker run \
-d \
--name certy \
-p 8000:8000 \
"$(pwd)/data:/data" \
nathanosman/certy
This will launch the service listening on port 8000 on your host and store data in data/ in the current directory.
To build the application, simply run:
go build


