Guides
How to generate SSL certificates locally.
Short answers to the searches that usually end in an OpenSSL man page.
Self-signed SSL for localhost HTTPS
Why browsers warn, how SANs work, and how to generate a localhost certificate.
Fix NET::ERR_CERT_AUTHORITY_INVALID
What Chrome is telling you, and the safe way to trust a lab or localhost cert.
Trust a self-signed certificate on Windows
Install a Root CA or leaf cert in the Windows certificate store.
Trust a self-signed certificate on macOS
Add a local CA to Keychain Access and mark it trusted.
Trust a self-signed certificate on Linux
Install a private CA into the system trust store on Debian, RHEL, and Arch.
Generate a CSR without sending the key
What a certificate signing request is, and how to create one in the browser.
Make a local CA and sign host certs
Trust one Root CA, then issue host certificates for every internal service.
mkcert alternative in the browser
When mkcert is right, when a browser workshop is safer, and how the files compare.
OpenSSL vs an online certificate generator
Use OpenSSL in CI. Use a local-in-the-tab generator when you do not want to paste a key.