CSR Generator

Generate a Certificate Signing Request (CSR) and private key entirely in your browser. Your private key never leaves your device.

Common Name (Domain)

The fully-qualified domain name you want to secure.

Organization

Organizational Unit

City / Locality

State / Province

Country Code

2-letter ISO country code (e.g. US, GB, IN)

Email Address

Key Algorithm & Size

RSA 2048-bit is widely compatible. ECDSA offers equivalent security with smaller key sizes.

About CSR Generation

What is a CSR?

A Certificate Signing Request (CSR) is a block of encoded text you submit to a Certificate Authority (CA) when applying for an SSL certificate. It contains your public key and identity information. The CA uses it to issue your certificate.

Is my private key really never sent to you?

Correct. All cryptographic operations happen entirely in your browser using the Web Crypto API (or node-forge library). No network requests are made during key generation. You can verify this by opening browser DevTools and watching network activity.

Which key type should I choose?

RSA 2048-bit is the most compatible option and is accepted everywhere. RSA 4096-bit provides extra security at the cost of slightly slower TLS handshakes. ECDSA (P-256 or P-384) provides equivalent security with smaller keys and faster performance — great for modern servers.