Certificates & CSRs
HexSign manages every Apple Developer certificate type (iOS Development, Distribution, Developer ID, Mac Installer, Pass Type ID, Apple Push, and others) alongside the certificate signing requests they were issued from. This category is for whoever owns the signing identity: the person who finds out, usually at the worst possible moment, that the distribution certificate behind a release was generated eleven months ago on a laptop that has since been wiped.
Read Create and revoke Apple Developer certificates first for the basic lifecycle and for what revoking actually breaks. Then turn on Auto-renew certificates and provisioning profiles, the article that makes most of this category unnecessary: a daily job reissues certificates 30 days before expiry and rebuilds the profiles pointing at them.
If you are holding a certificate that predates HexSign, Upload a private key for a certificate created outside HexSign is what unlocks renewal and rotation for it, because renewal needs the original key.
Articles
5 articles in certificates & csrs
Create and revoke Apple Developer certificates
Issue a new iOS or macOS certificate from a CSR and revoke certificates without breaking dependent profiles.
Generate and store CSRs in the HexSign vault
Generate certificate signing requests with private keys encrypted at rest, or upload your own and reuse them across certificates.
Upload a private key for a certificate created outside HexSign
Pair a private key with a certificate you originally issued in the Apple Developer portal (or another tool) so HexSign can export .p12 bundles for it.
Rotate an expiring signing certificate without breaking releases
A safe sequence for swapping a soon-to-expire certificate for a new one across every dependent provisioning profile.
Auto-renew certificates and provisioning profiles
Let HexSign reissue expiring distribution certificates and rebuild dependent provisioning profiles automatically, without ever shipping the work to a release week.
Other topics
Explore the rest of the help center
Getting started
Set up HexSign, connect an Apple Developer account, and get your first sync running.
Browse categoryCommand line (CLI) & CI
Install the HexSign CLI, sign in, and script certificate and profile operations from your terminal, GitHub Actions, fastlane, Bitrise, GitLab CI, or CircleCI.
Browse categoryProvisioning profiles
Create, regenerate, and download provisioning profiles using the wizard or directly from the dashboard.
Browse categoryAlerts & monitoring
Configure alerts to email, Slack, Microsoft Teams, and incident tools, read the health score, and stay ahead of expirations.
Browse categoryTeam & billing
Invite teammates, assign roles, manage MFA and SSO, and handle Stripe-powered billing.
Browse categoryTroubleshooting
Diagnose sync errors, profile/certificate mismatches, and CI signing failures.
Browse category