CSR Generator
Create certificate signing requests with SAN support
Safety note: Generate a CSR and matching private key. Save the private key securely; anyone with it may be able to impersonate the subject.
Inputs + outputs
Comma-separated DNS names for the SAN extension.
CSR Generator
Generate a certificate signing request (CSR) for TLS certificates. This tool creates a new key pair and CSR with optional SAN entries.
How to Generate a CSR
- Fill in the certificate subject fields and SANs.
- Select RSA or ECDSA key settings.
- Click Generate CSR to create your request and private key.
Certificate Fields Explained
- CN: The primary domain name.
- SAN: Additional hostnames included in the certificate.
- O/OU: Organization details for your certificate request.
- C/ST/L: Country, state, and locality fields.
Do This Locally (CLI)
# RSA CSR (single CN)
openssl req -new -newkey rsa:2048 -nodes -keyout key.pem -out request.csr -subj "/CN=example.com"FAQ
Where is my private key stored?
The matching private key is generated with the CSR. Save it securely before leaving the page.
Can I include multiple domains?
Yes. Add them as comma-separated entries in the SAN field.
Which key type should I use?
RSA 2048 or 3072 is widely compatible; ECDSA is smaller and faster if supported.