# mkcert changelog > Simple tool to make locally trusted development certificates - Vendor: mkcert - Category: Developer Tools - Official site: https://github.com/FiloSottile/mkcert - Tracked by: What's New (https://whatsnew.fyi/product/mkcert) - Harvested from: GitHub (filosottile/mkcert) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v1.4.4 — Firefox Snap support for Ubuntu 22.04 - Date: 2022-04-26 - Version: v1.4.4 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.4.4 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.4.4 Firefox packaged in a Snap, which is the default browser of Ubuntu 22.04, is now supported ✅ Fixed a crash when a CSR doesn't have SANs 💥 Calling `mkcert` with no arguments only prints the help text 🤫 Pre-built binaries for windows/arm64 and darwin/arm64 🧱 Pre-built binaries are now available at stable URLs like these 🔗 https://dl.filippo.io/mkcert/latest?for=linux/amd64 https://dl.filippo.io/mkcert/v1.4.4?for=windows/arm64 ### v1.4.3 — Cleaned up EKUs - Date: 2020-11-25 - Version: v1.4.3 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.4.3 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.4.3 The EKU logic is now simpler, and it follows the following rules * if an IP address, DNS name, or URI SAN is present, serverAuth is included * if `-client` is used, clientAuth is included * if an email address SAN in present, emailProtection is included Certificate generation based on CSRs is now consistent with standard certificate generation. Releases are now built from GitHub Actions. ### v1.4.2 — It's been a while - Date: 2020-10-26 - Version: v1.4.2 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.4.2 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.4.2 * **Reduce certificate lifetime to 2 years and 3 months** * Detect various flavors of Firefox (#225, #280) * Build release binary for linux/arm64 (#284) The Go import path of the module is now filippo.io/mkcert, which should only affect users installing the tool with `go get`, which was never a recommended installation method. ### v1.4.1 — The little things - Date: 2019-11-09 - Version: v1.4.1 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.4.1 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.4.1 *Note: packagers building from source now need to set the version like `-ldflags "-X main.Version=$VERSION"`* * Use `sudo` when necessary to install in system-wide NSS stores (#192) * Add a `-version` flag (#191) * Speed up macOS execution by 4x for most users (#135) * Minor usability improvements (#182, #178, #188) ### v1.4.0 — macOS Catalina compatibility, URL and email SANs, and more - Date: 2019-08-16 - Version: v1.4.0 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.4.0 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.4.0 macOS 10.15 Catalina introduced [certificate lifespan limits](https://support.apple.com/en-us/HT210176) which block mkcert certificates. As a temporary measure, mkcert certificates now have a fixed notBefore date of June 1st, 2019. Once the ACME server is implemented, certificate lifespan will be shortened to 3 months. (#174) **Certificates generated by previous versions of mkcert after July 1st, 2019 will not work on macOS 10.15 Catalina**, and will have to be regenerated. The root CA is unaffected and there is no need to rerun `mkcert -install`. URL (#166) and email (for S/MIME, #152) SANs are now supported. Client certificates are now created with a `-client` filename suffix, and they claim the serverAuth EKU as well as the clientAuth one. The certificate subject now includes the full user name, like `filippo@Bistromath.local (Filippo Valsorda)`. SLES, OpenSUSE (#162), Snapcraft (#116), and CentOS 7 (#120) are now supported. Linux release binaries are now fully static, and will work regardless of the system libc. (#169) ### v1.3.0 — Miscellaneous advanced features - Date: 2019-02-03 - Version: v1.3.0 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.3.0 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.3.0 🔬 New advanced options: * `-ecdsa` to generate ECDSA private keys * `-client` to generate client certificates * `-csr` to sign certificate signing requests * `$TRUST_STORES` to select what stores to install into Also, in other news: * Add "Firefox Nightly.app" support on macOS * Set the CommonName when generating PKCS#12 files for IIS ### v1.2.0 — -cert-file, -key-file and -p12-file - Date: 2019-01-07 - Version: v1.2.0 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.2.0 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.2.0 * Add `-cert-file`, `-key-file` and `-p12-file` flags * Add some helpful lines to docs and output * Fix Java failure modes on Windows ### v1.1.2 — Support certutil as installed by MacPorts - Date: 2018-08-25 - Version: v1.1.2 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.1.2 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.1.2 ### v1.1.1 — Four new minor supported targets - Date: 2018-08-19 - Version: v1.1.1 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.1.1 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.1.1 * Support the Arch system root store * Support Java on Windows * Support the JRE root store * Support multiple CAs on Linux ### v1.1.0 — Windows, Java and PKCS#12 - Date: 2018-08-13 - Version: v1.1.0 - Original notes: https://github.com/FiloSottile/mkcert/releases/tag/v1.1.0 - Permalink: https://whatsnew.fyi/product/mkcert/releases/v1.1.0 A round of new supported root stores and formats, all contributions from the community.