CSR Generator — Free Online Certificate Signing Request Generator
Generate a CSR and RSA private key pair for SSL/TLS certificate purchase — 100% in-browser, your private key never leaves your machine.
Jump to tool ↓Frequently Asked Questions
How to Generate a CSR
A Certificate Signing Request (CSR) is the first step in obtaining an SSL/TLS certificate from a Certificate Authority (CA). The CSR contains your public key and identifies your organization to the CA. The CA verifies your identity and returns a signed certificate.
This generator creates an RSA key pair and PKCS#10 CSR entirely in your browser. The private key is generated using node-forge's RSA key generation and is never transmitted anywhere. Save both files securely — you will need the private key when installing the signed certificate.
Required field: Common Name (the domain you are securing). Strongly recommended: Subject Alternative Names listing all domains the certificate should cover. Modern CAs and browsers require domains to appear in the SAN extension.
Standards & References
Built and maintained by DevDecode. This tool processes your input in your browser; it is not uploaded for processing. Found an issue? Let us know.
Related Tools
Related Guides
How to Create a Self-Signed Certificate with OpenSSL
Generate a self-signed SSL certificate with OpenSSL in one command, add Subject Alternative Names for modern browsers, and know when to use one (and when not to).
CertificatesWhat Is a CSR File? (Certificate Signing Request Explained)
Learn what a certificate signing request contains, how SANs and public keys are used, and how to verify a CSR before certificate issuance.
CertificatesOpenSSL Commands Cheat Sheet: CSR, Certificates, Keys & Debugging
The essential OpenSSL commands for generating CSRs, inspecting certificates, converting formats, testing TLS connections with s_client, and generating keys. Copy-paste ready.