CSR Generator
Generate a certificate signing request and private key.
The key pair and CSR are generated in your browser and never leave your device. Send the CSR to your certificate authority and keep the private key safe.
100% private - runs entirely in your browser.
Your input, keys and passwords are never uploaded. Want proof? Load this page, then turn off your internet - the tool still works. For an exact check, open your browser's DevTools Network tab and confirm no data is sent when you use it.
About the CSR Generator
Generate a certificate signing request (CSR) and matching private key to order an SSL/TLS certificate.
Fill in the domain and organization details, choose a key size, and get both the CSR and the private key in PEM format.
The key pair and CSR are generated in your browser and never leave your device.
Key features
- CSR with your subject details
- 2048 or 4096-bit RSA key
- CSR and private key in PEM
- Runs entirely in your browser
How to use
- 1Enter the Common Name (domain) and details.
- 2Choose a key size and generate.
- 3Send the CSR to your certificate authority and keep the private key safe.
Examples
example.com + Example Inc + GBA CSR and private key in PEMSend the CSR to your CA and keep the key safe.
4096-bit keyA larger key pair and CSRHigher bit sizes add security margin.
Frequently asked questions
- What is a CSR?
- A certificate signing request contains your public key and details. You send it to a certificate authority, which returns a signed SSL certificate.
- Which fields are required?
- The Common Name (your domain) is the most important. Organization and country are commonly required by certificate authorities.
- Is the private key uploaded?
- No. The key pair and CSR are generated in your browser. Keep the private key secret.