KeyStore Explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.

Official website: https://keystore-explorer.org/

Features:

• Create, load, save and convert between various KeyStore types: PKCS#12, JKS, JCEKS, BKS, BCFKS and UBER
• Change KeyStore and KeyStore entry passwords
• Delete or rename KeyStore entries
• Cut/copy/paste KeyStore entries
• Append certificates to key pair certificate chains
• Generate RSA, ECC, DSA, ML-DSA, ML-KEM and SLH-DSA key pairs with self-signed X.509 certificates
• Create CRLs
• Apply X.509 certificate extensions to generated key pairs and Certificate Signing Requests (CSRs)
• View X.509 Certificate, CRL and CRL entry X.509 V3 extensions
• Import and export keys and certificates in many formats: PKCS#12, PKCS#8, PKCS#7, DER/PEM X.509 certificate files, Microsoft PVK, SPC, PKI Path, OpenSSL
• Generate, view and sign CSRs in PKCS #10 and SPKAC formats
• Sign/verify JAR files
• Sign/verify files using CMS/PKCS #7
• Configure a CA Certs KeyStore for use with KeyStore operations
• Password manager for managing KeyStore and KeyStore entry passwords

Running

A Java Runtime Environment (JRE) version 17 or higher is required to run KSE.

To run the application, issue the following command from the kse directory:

Or run org/kse/KSE.java directly from an IDE.

Translating

Please help to translate on the Weblate translation platform (opens in a new tab).

Alternatively you can contribute translations directly on GitHub. KSE uses Java resource bundles for translations. Translators can clone this repository and add their translations to the kse/src/main/resources/org/kse subdirectories. Use the "Resource Bundle Editor" plugin for JetBrains IDEs to simplify the process.