#### WARNING!

Do not encrypt the private key in the set you will use for SSL on the Pineapple! If you do nginx will require a password upon boot which you will not have the chance to enter thus forcing you to factory reset your Pineapple!

Key Type
Select the type of keys you want to build.
Bit Size
This is the key length. The higher the value the harder it is to crack the key. Higher values will take longer to build and longer to check when used in applications. 2048 is the recommended value for web applications.
Key Pair Name
This is the name of your keys when they are generated. Single word names are best.
Days Valid
This value indicates how long the certificate will be valid. A default value of 365 days is set for convenience.
Signature Algorithm
SHA-1 has officially been broken so SHA-256 is selected by default.
Subject Alternative Names (SAN)
A comma-delimited list of SANs. These are alternative names that will be considered valid when verifying the certificate. For example if you're spoofing multiple sites during a pentest you'll want to add SANs (*.company1.com, *.company2.com, *.com).
Certificate Info (click to expand)
These fields are self explanatory and provide information that gets embedded in the public key. This can be left blank but if so the default settings will be used by OpenSSL.
Encrypt Private Key
Check this box if you want to require a password to view the private key. You will have to select an algorithm (SHA-256 by default) and enter a password.
Export keys to PKCS#12 container
Check this box if you want to export both the private and public keys into an encrypted container. This option will generate three files (.cer, .pem, .pfx).