OpenSSL

Encryption Suite

Certificate Authority

OpenSSL has support for a lot of PKI functions, including creating your own Certificate Authority:

There are other tools that can also be used to create CA also:

  1. simple
    GitHub - FiloSottile/mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like.

  2. capable
    GitHub - smallstep/certificates: 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

  3. comprehensive
    GitHub - Keyfactor/ejbca-ce: EJBCA® – Open-source public key infrastructure (PKI) and certificate authority (CA) software.