How to create a CA-Signed certificate using XCA application

This article explains how to create a CA-Signed certificate using XCA application.

First, we need to create Certification authority (CA) certificate.

1. Click the Certificates tab
2. Click the New Certificate button
3. Under Signing settings select “Create a self-signed certificate”
4. Under  “Template for the new certificate”, select [default] CA and click Apply all

      5.Click the Subject tab and fill in all the information then click the Generate a new key button.

      6. Click the the Extensions tab and chose the Certification Authority Type under X509v3 Basic Constraints and click OK

Next, we need to create a device certificate.

1. Click the Certificates tab
2. Click the New  Certificate button
3. Under Signing, make sure to select “Use this Certificate for signing” and chose the previously created CA.
4. Under “Template for the new certificate”, select default HTTPS_server and click Apply all

        5. Go to the Subject tab, fill in all the information then click the Generate a new key button and click OK

          6. The certificate should now appear in the window under the CA certificate.

     Export the certificates and keys in .PEM format

1. Select the Certificates Tab.
2. Highlight the CA certificate and click the Export button
3. Highlight the EZ4 certificate and click the Export button
4. In the Certificate export window, select PEM as the export format and click OK

1. Select the Private Keys tab.
2. Highlight the host certificate and click the Export button
3. In the Key export window, select PEM as the export format and click OK