A browser alternative to mkcert.

mkcert is excellent when you want one laptop trusted automatically. Use SelfSignedCert when you need the PEMs, a CA you can copy to a NAS, or you do not want another binary.

When mkcert wins

One developer Mac or Linux box. You want Firefox and the system store updated in one command.

When this site wins

You are on a jump host, a locked-down Windows box, or you need a CA that will also live on Proxmox, UniFi, or a Cisco web UI. Generate the files and keep the key. No install, no upload.

Written for operators who have to trust the box they just stood up. Private keys stay in the tab. Open the generator.

Self-signed SSL for localhost HTTPS
Fix NET::ERR_CERT_AUTHORITY_INVALID
Trust a self-signed certificate on Windows
Trust a self-signed certificate on macOS