Certificate Builder

Generate a self-signed TLS certificate + private key (PEM) on this host.

The certificate and private key are written to the host's certificate directory (usually <data>/certs). The private key never leaves the server — this page shows only the file paths and the SHA-256 fingerprint. Point your TLS settings at the generated .crt / .key paths. Requires the manage_certificates permission.

Common Name (CN) — the primary hostname

Subject Alternative Names (comma-separated DNS names and/or IPs)

Organization (O)

Organizational Unit (OU)

City (L)

State (ST)

Country (C)

Validity (days)

Key size (bits: 2048 / 3072 / 4096)

Output directory (blank = host default)

Certificate filename

Private-key filename

PKCS#12 filename (.pfx; blank = don't emit)

PKCS#12 password (optional)