Ross ROSS = Recommend OSS · open-source software intelligence for agents

kaikramer/keystore-explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner. observed · 2026-08-28

github.com/kaikramer/keystore-explorer · homepage · Java · GPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

88/100

  • Activity 99
  • Release rhythm 67
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 231.0
  • age_days: 3940
  • days_rel: 10
  • days_push: 10
  • n_releases_24m: 3

Full methodology

Adoption not part of the score

2042 stars · 315 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

KeyStore Explorer is a free, open-source Java desktop application that provides a graphical interface replacing the keytool and jarsigner command-line utilities. It manages Java keystores, X.509 certificates, key pairs, CSRs, CRLs, and file/JAR signing across many cryptographic formats.

Use cases

  • manage java keystores with a gui instead of keytool
  • convert between pkcs12 jks and other keystore formats
  • generate rsa ecc or post-quantum key pairs with self-signed certificates
  • create and sign certificate signing requests
  • sign and verify jar files for code signing
  • inspect x509 certificates and crl extensions
  • create a simple ca to sign certificates
  • import and export private keys in pem pkcs8 or openssl formats

When to choose

  • you work with Java keystores, certificates, or code signing and want a GUI instead of command-line tools
  • you need to convert keys and certificates between many formats (PKCS#12, JKS, PEM, PVK, OpenSSL, JWK)
  • you want to inspect or edit X.509 certificate extensions, CSRs, or CRLs visually
  • you need a lightweight CA for signing certificates and CRLs
  • you want support for modern algorithms including Ed25519 and post-quantum ML-DSA/ML-KEM/SLH-DSA

When to avoid

  • you need fully automated, scriptable certificate management in CI/CD pipelines (CLI tools like keytool or openssl fit better)
  • you need a full-featured enterprise CA with revocation infrastructure
  • you don't have a Java runtime and can't install one
  • you need to manage non-Java secret stores like HashiCorp Vault or cloud KMS

Facets

application · maturity active

cryptography security gui developer-tools security developer-tools cross-platform cross-platform jvm windows keystore x509 certificates keytool jarsigner java pki code-signing pkcs12 post-quantum desktop macos linux

4 sources

Member repositories

RepositoryRoleHealth v2
kaikramer/keystore-explorermain88

For agents

markdown · JSON · MCP: product_card(name="kaikramer/keystore-explorer")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem