CSR Generator

Create a private key and certificate signing request (RSA or ECDSA, with SANs) in your browser. The key never leaves your device.

To get a TLS certificate you send a certificate authority a certificate signing request (CSR): your hostnames plus a public key, signed with the matching private key. The CA never sees the private key, and nobody else should either: whoever holds it can impersonate your server. This page makes the key pair and the CSR in your browser, which is handy when you can't easily run OpenSSL. Generating on the server that will use the certificate (OpenSSL, IIS, certreq) is better still, because the key then never exists anywhere else.