Create root certificate and its sub-Certificate

"Cn = ***", otherwise the certificate will be inconsistent with the domain name. It doesn't matter if the other is the file name!

Tool download: signtool

1. Use makecert.exe to create a self-Signed root certificate

Makecert-n "cn = www. Xiaoyan. Me"-SV rootca. PVK-r rootca. Cer

-NSubjectnameTopic name
-SVPrivatekeyfileFile containing the private key container
-R: Specify the certificate as self-signed

2. Issue a sub-certificate through the issued root certificate

Makecert-n "cn = Dev. Xiaoyan. Me"-ic rootca. cer-IV rootca. PVK-SV Dev. Xiaoyan. Me. PVK Dev. Xiaoyan. Me. Cer

-NSubjectnameTopic name
-ICIssuercertfileSpecify the issuer certificate location
-IVIssuerkeyfileSpecify the issuer certificate Private Key File
-SVSubjectkeyLocation of the theme key container that saves the Private Key

3. Use cert2spc to generate a SPC issuer Certificate

Cert2spc wing.3cow.cn. Cer rootca. Cer Xiaoyan. Me. SPC

4. Generate a pfx certificate using pvk2pfx

Pvk2pfx-PVK Dev. Xiaoyan. Me. PVK-SPC Dev. Xiaoyan. Me. SPC-pfx Dev. Xiaoyan. Me. pfx-F-po ABC

-F overwrites
-Po password protection

PS: subjectname can include CN (Common name), ou (Organization Unit), O (organization), L (locality), S (state), C (country ), each item is separated by a comma (,), and the name must be escaped by a backslash (\).

Reference: http://msdn.microsoft.com/zh-cn/library/ms733813.aspx