CSR Generator — RSA Key Pair

Generate an RSA key pair and the matching certificate signing request in your browser, with the private key never leaving the page.

How to use
  1. Fill in common name, organisation and country.
  2. Generate the RSA key pair and CSR.
  3. Save the private key, then send the CSR to your CA.
Frequently asked questions
Does my private key leave the browser?
No. The key pair is generated in the page with the Web Crypto API and never transmitted, which is the only safe way to do this on a web page.
What key size should I pick?
2048 bits is the current minimum and what most certificate authorities accept. 4096 is stronger and slower, and is worth it for a long-lived root.
What goes in the common name?
The fully qualified domain the certificate is for, such as www.example.com. Additional names belong in the subject alternative name list.
What do I do with the two outputs?
Send the CSR to your certificate authority and keep the private key on the server that will use it. Losing the key means starting over.
 Last updated 
Powered by maratool