SimpleSSL gives sysadmins and developers a fast, native toolkit for the certificate work that comes up every day — generating keys and CSRs, inspecting live TLS chains, and building export bundles — w
SimpleSSL gives sysadmins and developers a fast, native toolkit for the certificate work that comes up every day — generating keys and CSRs, inspecting live TLS chains, and building export bundles — without ever leaving the Mac or firing up a terminal.
Everything runs on your device. No OpenSSL subprocess. No network calls except the TLS checks you choose to run. Sandboxed and App Store approved.
Key & CSR Generator
Generate RSA (2048, 3072, 4096) or ECDSA (P-256, P-384) keys and matching certificate signing requests in seconds. Domain-validated (DV) certificates are fully supported in the free version, with all the fields you need for standard SSL/TLS requests.
* RSA and ECDSA key generation — all common sizes
* DV CSR output with Subject Alternative Names (SANs)
* Self-signed certificate generation for local testing
* Save to .key, .csr, .crt, or .pub — your choice of location
* Secure Enclave support on T2 and Apple Silicon Macs
Certificate Bundle Builder
Drag in your certificates and let SimpleSSL sort out the chain. It detects the server cert, orders intermediates, spots duplicates by SHA-256 fingerprint, and confirms the private key matches before you export.
* Drag-and-drop or browse for key and certificate files
* Automatic chain ordering: server → intermediates → root
* Duplicate detection by SHA-256 fingerprint
* Private key / certificate match validation
* Export as .p12, .pfx, .pem bundle, or .der
* Fetch Issuing CA is available in SimpleSSL Pro.
Chain Checker
Point it at a hostname and see the full TLS chain in one view — expiry dates, hostname match, SANs, chain order, and trust evaluation against macOS system roots. Or paste PEM blocks directly if you’re working offline.
* Live TLS check via direct connection to any host
* PEM paste mode for offline inspection
* Per-certificate expiry, hostname match, and SAN display
* Chain order validation via macOS Security framework
* Trust evaluation against system roots
* Configurable connection timeout (Settings → Network)
Privacy & security
SimpleSSL holds no analytics SDKs, no advertising frameworks, and no crash reporters. Your keys and certificates never leave your device unless you explicitly export them. Full privacy policy at www.ridgeley.dev/privacy.
Upgrade to SimpleSSL Pro
Pro unlocks OV and EV certificate generation (with organisation and jurisdiction fields), YubiKey Support, Fetch Issuing CA feature in Bundle Builder, iCloud sync for ACME profiles, and the full ACME Certificate Manager for automated Let’s Encrypt issuance with Cloudflare and Namecheap DNS integration.