A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc. Out of the box; step uses ECDSA. We've bundled templates to generate RSA infrastructure. step certificate create "Example Root CA" \ $(step path)/certs/root_ca.crt \ $(step path)/secrets/root_ca_key \ --template /usr/share/step/templates/rsa_root_ca.tpl \ --kty RSA \ --not-after 87660h \ --size 3072 step certificate create "Example Intermediate CA" \ $(step path)/certs/intermediate_ca.crt \ $(step path)/secrets/intermediate_ca_key \ --ca $(step path)/certs/root_ca.crt \ --ca-key $(step path)/secrets/root_ca_key \ --template /usr/share/step/templates/rsa_intermediate_ca.tpl \ --kty RSA \ --not-after 87660h \ --size 3072