Certificates & CSRs
HexSign manages every Apple Developer certificate type (iOS Development, Distribution, Developer ID, Mac Installer, Pass Type ID, Apple Push, and others) alongside the certificate signing requests they were issued from. The articles below cover the full certificate lifecycle.
Articles
5 articles in certificates & csrs
Create and revoke Apple Developer certificates
Issue a new iOS or macOS certificate from a CSR and revoke certificates without breaking dependent profiles.
Generate and store CSRs in the HexSign vault
Generate certificate signing requests with private keys encrypted at rest, or upload your own and reuse them across certificates.
Upload a private key for a certificate created outside HexSign
Pair a private key with a certificate you originally issued in the Apple Developer portal (or another tool) so HexSign can export .p12 bundles for it.
Rotate an expiring signing certificate without breaking releases
A safe sequence for swapping a soon-to-expire certificate for a new one across every dependent provisioning profile.
Auto-renew certificates and provisioning profiles
Let HexSign reissue expiring distribution certificates and rebuild dependent provisioning profiles automatically, without ever shipping the work to a release week.
Other topics
Explore the rest of the help center
Getting started
Set up HexSign, connect an Apple Developer account, and get your first sync running.
Browse categoryCommand line (CLI) & CI
Install the HexSign CLI, sign in, and script certificate and profile operations from your terminal, GitHub Actions, fastlane, Bitrise, GitLab CI, or CircleCI.
Browse categoryProvisioning profiles
Create, regenerate, and download provisioning profiles using the wizard or directly from the dashboard.
Browse categoryAlerts & monitoring
Configure alerts to email, Slack, Microsoft Teams, and incident tools, read the health score, and stay ahead of expirations.
Browse categoryTeam & billing
Invite teammates, assign roles, manage MFA and SSO, and handle Stripe-powered billing.
Browse categoryTroubleshooting
Diagnose sync errors, profile/certificate mismatches, and CI signing failures.
Browse category