Certtool is a UNIX command-line program which is used to create key pairs, certificates, and certificate signing requests; to import externally generated certificates and Certificate Revocation Lists (CRLs) into a Keychain, and to display the contents of certificates and CRLs.