how do i edit a self signed certificate in windows 2019

Question

can I edit a self signed cert on server 2019 to meet company requirements or should i regenerate self signed root , intermediate and personal certs on the server ?

Answer 1

You need to generate a new certificate. You cannot edit a certificate once it is created as that would defeat the purpose of using certificates.

A certificate is signed meaning the data it contains is valid and hasn't been modified. This provides you guarantees that the certificate is from who it says it is and allows for the validation of content sent using that cert. If you could modify a cert after the fact then nothing would prevent a malicious user from taking your certificate, modifying the cert to contain the malicious data they want and then let you use the, now modified, cert as though it was the original.

Answer 2

Hello，

Editing a self-signed certificate directly is generally not recommended because it can lead to trust issues, as the certificate's integrity is compromised once it's altered. Instead, if your company requirements are not met by an existing self-signed certificate, you should consider regenerating the certificate.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.