PFSense - Certificates - Create a Certificate Authority (CA)

A Certificate Authority (CA) is a trusted entity that issues Secure Sockets Layer (SSL) certificates.

Create the CA

Navigate to System → Cert Manager.

Select the CA tab and create a CA by pressing the “+” button.

In Create / Edit CA:

Descriptive Name: <some name to make it easy to identify.
Method: Create Internal Certificate Authority.
Trust Store: <Not Checked>.
Randomize Serial: <Checked>.

In Internal Certificate Authority:

Key Type: RSA.
Key length: 2048 bit.
Digest Algorithm: SHA 256.
Lifetime: 3650. (10 years).
Common Name: ShareWiz - OpenVPN CA.
Country Code: JE.
State or Province: <blank>.
City: St. Helier.
Organization: ShareWiz.
Organizational Unit: <blank>.