makecert comes (for instance) with Visual Studio (it’s deprecated, but still useful). Open a VS command line (as admin). Sample command line for a test certificate: -r: self-signed -pe: private key exportable -n: Followed by name of publisher’s certificate (“CN=…”) -m: duration in months -sky: Subject’s key specification (here: Exchange) -ss: Name of the subject’s certificate store …