certtool

This script parses PEM or DER certificates, requests, CRL's, PKCS#12, PKCS#7 & PKCS#8 files, Java keystores, NSS databases, Diffie-Hellman / DSA / Elliptic Curve parameters and private & public keys (from OpenSSH too). It uses OpenSSL for most operations (unless the openssl variable is empty), otherwise it uses GnuTLS' certtool. If the certtool …

macOS native certificate toolkit