Projects / X Certificate and Key management

X Certificate and Key management

XCA is an interface for managing RSA and DSA keys, certificates, certificate signing requests, revocation lists and templates. It uses the OpenSSL and Qt4 libraries. Certificates and requests can be created and signed and many x509v3 extensions can be added. XCA supports multiple root and intermediate Certificate authorities. The CAs can be used to create CRLs and extend certificates. The following file-formats are supported: PEM, DER, PKCS#7, PKCS#8, PKCS#10, PKCS#12, and SPKAC.

Operating Systems

Recent releases

  •  07 Nov 2011 08:21

    Release Notes: This release adds search functionality for PKCS#11 libraries, allows display of x509v3 extensions as columns in the certificate and request list, and supports exporting of requests and certificates as openssl config files. It also fixes some bugs.

    •  29 Aug 2010 09:33

      Release Notes: This release improves the usability and Smart-card handling. XCA now supports token initializing, creating keys on a token, storing existing keys on a token, and deleting keys and certificates from a token. XCA supports drag and drop by opening items dropped onto it.

      •  06 Jan 2010 14:03

        Release Notes: This bugfix release fixes a bug that sometimes crippled DistinguishedName entries.

        •  11 Dec 2009 16:48

          Release Notes: This release adds support for smartcards via the PKCS#11 library API. They can be used like other keys. Certificates from a smartscard can be imported. XCA now also supports EC Keys. Templates can now be generated from a certificate or a PKCS#10 request.

          •  12 Sep 2009 08:59

            Release Notes: The validation of certificate requests was fixed. During certificate creation the user is notified about duplicate v3 extensions. The subject of certificate requests can now be modified before signing it. Arbitrary X509v3 extensions may be added by using the OpenSSL configuration file format on the "Advanced Settings" tab. A validation button computes and displays all extensions before creating the certificate.

            Recent comments

            23 Jul 2003 01:44 bentterp

            Good job!
            First tool I've found that helps me with this job!

            07 Mar 2003 08:35 mmlenz

            Excellent program
            This program has a ton potential. The interface needs a bit of refining and some ease of use issues but other than that its excellent.


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.