• View
• Edit
• History
• Print

Certs

Create new root cert:

makecert.exe -sky exchange ^
             -r ^
             -n "CN=IT Hobby" ^
             -sr CurrentUser ^
             -b "03/31/2023" ^
             -e "01/01/2035" ^
             -pe ^
             -a sha512 ^
             -len 4096 ^
             -ss Root %userprofile%\Desktop\public.crt

Sign exe file:

signtool.exe sign -s Root ^
                  -r "IT Hobby" ^
                  -a -tr "http://timestamp.digicert.com" ^
                  -td sha512 "%EXE_PATH%"

Installing root cert to system:

certutil.exe -addstore "Root" public.crt

Path to utils:

set PATH=%PATH%;C:\Program Files\Windows Kits\8.0\bin\x86

Cert attributes:

• CN: CommonName
• OU: OrganizationalUnit
• O: Organization
• L: Locality
• S: StateOrProvinceName
• C: CountryName

CN=Sample Cert, OU=R&D, O=Company Ltd., L=Dublin 4, S=Dublin, C=IE