A certificate signing request contains your public key and details. You send it to a certificate authority, which returns a signed SSL certificate.

Which fields are required?

The Common Name (your domain) is the most important. Organization and country are commonly required by certificate authorities.

Is the private key uploaded?

No. The key pair and CSR are generated in your browser. Keep the private key secret.

Security & Cryptography

CSR Generator

Generate a certificate signing request and private key.

Free browser toolRuns in your browserNo sign-up

Common Name (domain)

Organization

Organizational Unit

City / Locality

State / Province

Country (2 letters)

Key size

The key pair and CSR are generated in your browser and never leave your device. Send the CSR to your certificate authority and keep the private key safe.

100% private - runs entirely in your browser.

Your input, keys and passwords are never uploaded. Want proof? Load this page, then turn off your internet - the tool still works. For an exact check, open your browser's DevTools Network tab and confirm no data is sent when you use it.

About the CSR Generator

Generate a certificate signing request (CSR) and matching private key to order an SSL/TLS certificate.

Fill in the domain and organization details, choose a key size, and get both the CSR and the private key in PEM format.

The key pair and CSR are generated in your browser and never leave your device.

Key features

CSR with your subject details
2048 or 4096-bit RSA key
CSR and private key in PEM
Runs entirely in your browser

How to use

1Enter the Common Name (domain) and details.
2Choose a key size and generate.
3Send the CSR to your certificate authority and keep the private key safe.

Examples

Generate a CSR

Input: example.com + Example Inc + GB

Output: A CSR and private key in PEM

Send the CSR to your CA and keep the key safe.

Stronger key

Input: 4096-bit key

Output: A larger key pair and CSR

Higher bit sizes add security margin.

Frequently asked questions

What is a CSR?: A certificate signing request contains your public key and details. You send it to a certificate authority, which returns a signed SSL certificate.
Which fields are required?: The Common Name (your domain) is the most important. Organization and country are commonly required by certificate authorities.
Is the private key uploaded?: No. The key pair and CSR are generated in your browser. Keep the private key secret.

Open a related tool to prepare your files or refine the finished result.