Linux · Utilities
XCA
X Certificate and Key management
by Christian Hohnstädt
Official site: flathub.org
About XCA
XCA is intended for creating and managing X.509 certificates, certificate requests, RSA, DSA and EC private keys, Smartcards and CRLs.
Everything that is needed for a CA is implemented.
All CAs can sign sub-CAs recursively. These certificate chains are shown clearly.
For an easy company-wide use there are customiseable templates that can be used for certificate or request generation.
Features:
Start your own PKI and create all kinds of private keys, certificates, requests or CRLs
Import and export them in any format like PEM, DER, PKCS#7, PKCS#12
Use them for your IPsec, OpenVPN, TLS or any other certificate based setup
Manage your Smart-Cards via PKCS#11 interface
Export certificates and requests as OpenSSL config file
Create Subject- and/or Extension- templates to ease issuing similar certs
Convert existing certificates or requests to templates
Get the broad support of x509v3 extensions as flexible as OpenSSL but user friendlier
Adapt the columns to have your important information at a glance
How to install XCA
- Click Download — the developer's official website opens in a new tab.
- Download the latest version there and run it. Choose Custom/Advanced where offered, and skip any bundled extras.
- Prefer the command line? With Flatpak you can install and update it with: flatpak install flathub de.hohnstaedt.xca
- Open XCA once it finishes installing.
Frequently asked questions
Is XCA free to download?
Yes. The Download button sends you to flathub.org, the developer's official site, where XCA is available to download. Flatnic doesn't host or modify any files.
How do I install XCA from the command line?
With Flatpak, run: flatpak install flathub de.hohnstaedt.xca. This installs it from the official source and keeps it updated.
Is XCA safe?
XCA downloads directly from the developer. As always, scan the installer with your antivirus and choose Custom setup to skip any bundled extras.
