About CSR Generator (Private Key + CSR)
This free CSR generator creates a private key and a certificate signing request (CSR) for an SSL/TLS certificate. Enter your domain names, choose RSA 2048, 3072 or 4096 or ECDSA P-256 or P-384, add your organisation details if your certificate authority needs them, and copy the CSR. Every domain and IP address is added as a subject alternative name (SAN), and wildcards such as *.example.com work too.
The key pair is generated by your browser’s own cryptography (WebCrypto), on your device. Nothing is uploaded or stored, so the private key exists only on your screen until you save it. The equivalent OpenSSL command is shown as well, in case you want to script it later.
How to use CSR Generator (Private Key + CSR)
- 01
Enter your domain names (the first becomes the Common Name).
- 02
Pick a key type and, if needed, your organisation details.
- 03
Copy or download the CSR for your certificate authority and keep the private key safe.
When to use it
- Ordering an SSL certificate from a certificate authority.
- Renewing a certificate with a fresh key.
- Requesting a multi-domain (SAN) or wildcard certificate.
- Creating a CSR for a firewall, load balancer or appliance that cannot make one.
- Getting a CSR quickly without installing OpenSSL.
Frequently asked questions
Is my private key sent anywhere?
No. The key is generated in your browser with WebCrypto and is never uploaded or stored. Save it before you close the page.
Which key type should I choose?
RSA 2048 works everywhere. ECDSA P-256 gives smaller, faster keys and is supported by all modern servers and browsers.
What happens after I generate the CSR?
Send the CSR to your certificate authority. It sends back a certificate that you install together with the private key from this page.