---
name: "mkesmtpdcert"
section: "8"
platform: "linux"
package: "courier-mta"
version: "1.4.1-3+deb13u2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/mkesmtpdcert"
---

# mkesmtpdcert(8)

Create a secure SMTP test certificate

## NAME

mkesmtpdcert - Create a secure SMTP test certificate

## SYNOPSIS

**/usr/sbin/mkesmtpdcert**

## DESCRIPTION

Secure ESMTP requires a valid, signed, X.509 certificate. The default location for the certificate file is /etc/courier/esmtpd.pem. The **mkesmtpdcert** generates a self-signed X.509 certificate, mainly for testing. For production use the X.509 certificate must be signed by a recognized certificate authority, in order for mail clients to accept the certificate.

/etc/courier/esmtpd.pem must be owned by the courier user and have no group or world permissions. The **mkesmtpdcert** command will enforce this. To prevent an unfortunate accident, **mkesmtpdcert** will not work if /etc/courier/esmtpd.pem already exists.

**mkesmtpdcert** requires OpenSSL to be installed.

## SEE ALSO

[**courier**(8)](/courier/8.md)\[1\].

## AUTHOR

**Sam Varshavchik**

Author

## NOTES

- 1\.

  [**courier**(8)](/courier/8.md)

  http://www.courier-mta.org/courier.html