jellyfin.homelab.local shouldn't throw a browser warning. Enter your internal domain, get a CA, a certificate, and a key — generated and signed entirely on your machine.
Domain or subdomain
Also covers the wildcard — e.g. *.homelab.local — so every subdomain is covered by one certificate.
Certificate validity
yr
The CA itself stays valid 10 years — you shouldn't have to re-trust it often — but you can reissue the certificate at any interval.
All key generation and signing happens in your browser. Nothing is sent anywhere.
This site does not collect, store, or transmit any personal data. Certificate generation happens entirely in your browser, using JavaScript running on your own device — the domain you enter, the keys generated, and the files produced never leave your machine or touch a server.
Analytics
If basic, aggregated analytics are ever added to measure traffic, this policy will be updated to reflect that before it happens.
Contact
Questions about this policy can be sent via the Contact page.
Terms of Use
This tool is provided free of charge, as-is, with no warranty of any kind. It generates a self-signed certificate authority and certificates intended for internal, private, or development use on networks and domains you own or control.
You are responsible for how the generated certificates and private keys are used and stored. Treat downloaded .key files as sensitive — anyone with access to a private key can impersonate the corresponding certificate.
This site is not liable for any loss, damage, or security issue arising from the use, misuse, or mishandling of certificates generated here.
About
Homelab services on internal domains — jellyfin.homelab.local, proxmox.lan, and the like — can't get a normal SSL certificate from a public authority like Let's Encrypt, because those domains aren't reachable from the public internet.
This tool solves that by generating your own local Certificate Authority and signing a certificate against it, entirely in your browser. Trust the CA once per device, and every certificate it issues afterward is trusted automatically — no more browser warnings on your internal services.
Contact
Questions, bug reports, or feature requests — send a message below.