This is a free tool built for the community - no expectations, no obligations. I genuinely enjoy building it.
That said, if you'd like to see bigger im provements or help make a Mac App Store re lease possible (which comes with real cost s for signing and distribution), a small donation goes a long way - you can find the BuyMeACoffee link in the Sponsor section of this repo.
Either way, thanks for using it!
Update: AIO SSL Tool is now on the App Store! With this, AIO SSL Tool now has a good amount of costs to maintain, develop, and distribute. The current V6.4.0 release will be the last free version for both Windows and MacOS and V7.0 will be the first paid iteration of the app with a lot of cleanup, NEW tools added, and a complete rewrite and rebuild of the Windows version that should make it all worth it long-term.
P.s. - new name coming 👀
The fastest way to turn any server certificate into a complete, trusted chain and ready-to-use PFX — in seconds.
A native macOS application and cross-platform desktop tool built for sysadmins and DevOps who need perfect SSL certificates without the hassle.
- 🔐 CSR Generation - Create Certificate Signing Requests and Private Keys with an intuitive interface
- 🔗 Full Chain Building - Automatically constructs complete certificate chains from server certificates
- 📦 PFX/P12 Creation - Build PFX files with full chain and private key
- 🔓 PFX Extraction - Extract certificates and private keys from existing PFX files
- � Auto-Updates (macOS) - Seamlessly receive and install updates automatically
- 🔒 Privacy First - All processing happens locally on your machine
- ⚡ Fast & Lightweight - Native Swift on macOS, efficient Python on Windows
| Platform | Download | Requirements |
|---|---|---|
| 🍎 macOS | Download DMG (V6.4.0) | macOS 14.0+ (Sonoma/Sequoia) |
| 🪟 Windows | Download EXE (V6.4.0) | Windows 10/11 |
macOS:
The app is unsigned, so on first launch you'll need to right-click the app and select "Open" (or use System Settings → Privacy & Security → "Open Anyway").
Windows:
Run the EXE directly. If Windows Defender warns you, click "More info" → "Run anyway".
ClearPass Guest -> Administration -> API Clients -> Create API Client
Match picture below for generating Client ID and Client Secret
Note: You can adjust Access Token Lifetime to a shorter window for better security practices. Every time you want to use this feature of the tool, a new secret will have to be generated.
MIT License - Copyright © 2026
Made by Cameron
