TekCERT

If you're in need of a powerful X.509 certificate and certificate signing request (CSR) generator and signing tool, you won't be disappointed with TekCERT. Designed to run seamlessly on a wide range of Windows operating systems (including Vista, Windows 7/8/10, and 2008-2019 Server), TekCERT is capable of generating certificates in a variety of unique bit lengths, including 1024, 2048, 3072, and 4096 bits.

Furthermore, TekCERT supports a variety of key algorithms, including sha-1withRSAEncryption, sha256withRSAEncryption, sha384withRSAEncryption, and sha512withRSAEncryption. While the freeware version is limited to sha-1withRSAEncryption, the full version of TekCERT truly shines in its ability to generate and automatically install certificates into Windows Certificate Store with private key.

TekCERT can also generate and process responses from certificate authorities, and sign certificate signing requests with a user-selected, or generate CA certificate (Self-Signed Certificate). Plus, with the ability to configure all certificate parameters through both a user-friendly GUI and a flexible command line interface, you're always in control.

But that's not all. TekCERT also features a variety of additional capabilities, including built-in SCEP server (SP License is required), and timestamp request generation and signing based on RFC 3161 (Commercial license is required). OCSP (RFC 5912) support and OCSP responder service (SP License is required) round out this powerful suite of features, making TekCERT an excellent choice for anyone in need of a top-notch certificate and CSR generator and signing tool.