XCA

The application provides a graphical interface for creating and managing X.509 certificates, certificate signing requests, and private keys using RSA, DSA, and EC algorithms. It supports the full lifecycle of a public‑key infrastructure, including generation of certificate authority hierarchies, signing of subordinate CAs, and handling of certificate revocation lists. All cryptographic objects are stored in a SQL database, with options for SQLite, MySQL/MariaDB, PostgreSQL, or Microsoft SQL Server via ODBC.

Users can import and export keys, certificates, and requests in a wide range of formats such as PEM, DER, PKCS#7, PKCS#8, PKCS#10, PKCS#12, and via PKCS#11 for smart‑card or HSM access. The tool offers customizable subject and extension templates, column‑based views, drag‑and‑drop editing, and sanity checks to streamline the issuance of similar certificates across an organization.

The software is targeted at administrators and developers who need to set up private PKI environments for IPsec, OpenVPN, TLS, or other certificate‑based configurations on macOS. It emphasizes flexibility in X.509v3 extensions while providing a user‑friendly alternative to command‑line OpenSSL workflows.