What the CSR generator is for
To buy or renew an SSL certificate, you send a certificate authority a certificate signing request (CSR) and keep the matching private key on your server. This generator creates both in your browser: enter your domain, any other names the certificate should cover, and optionally your organisation, then choose RSA 2048 or ECDSA P-256. You get the CSR and private key as PEM text to copy or save, plus a summary of what the CSR contains. The private key is made with your browser's own cryptography and is never sent to us.
Frequently asked questions
Is it safe to create a private key in a browser?
Yes. The key is generated by your browser's built-in cryptography (WebCrypto), shown only on this page and never sent anywhere. Close the page when you're done, and store the key file somewhere only you and your server can read.
Do I need to fill in organisation and city?
Not for most certificates. Domain-validated certificates only use the domain names. Organisation and location matter for organisation-validated (OV) and extended-validation (EV) certificates, and then they must match your company's official records.
My hosting panel asks for a CSR. What do I paste?
Paste the CSR, the text from -----BEGIN CERTIFICATE REQUEST----- to -----END CERTIFICATE REQUEST-----. Keep the private key for when you install the certificate you receive.