SSL/CSR Generator

Generate Certificate Signing Request and Private Key

Your Security is Our Priority

Private keys are generated in memory and delivered directly to you. We never store, log, or transmit your private key. After download, keys are immediately discarded from server memory.

Domain Information

Enter your domain name. Use *.domain.com for wildcard certificates.

Organization Information

2-letter ISO code

Key Options

Generate Your CSR

Fill out the form and click generate to create your Certificate Signing Request and Private Key.

Understanding CSR and SSL Certificates

A Certificate Signing Request (CSR) is the first step in obtaining an SSL/TLS certificate for your website. When you generate a CSR, you're creating a file that contains your organization's information and a public key. This file is then submitted to a Certificate Authority (CA) who verifies your identity and issues a trusted SSL certificate.

What's in a CSR?

A CSR contains several pieces of information that will be included in your SSL certificate:

  • Common Name (CN) - Your fully qualified domain name (e.g., www.example.com)
  • Organization (O) - Your legally registered company name
  • Country (C) - Two-letter country code (e.g., US, TR, DE)
  • State/Province (ST) - Full state or province name
  • Locality (L) - City where your organization is located
  • Email Address - Contact email for certificate matters

Key Size: 2048 vs 4096 Bits

2048-bit (Recommended)

Industry standard, faster processing, supported everywhere. Sufficient security for most use cases until 2030+.

4096-bit (High Security)

Stronger security, slower SSL handshakes, slightly higher server load. Recommended for financial or healthcare applications.

Steps to Get Your SSL Certificate

  1. Generate CSR - Use this tool to create your CSR and private key
  2. Save Your Private Key - Store it securely; you'll need it for installation
  3. Submit CSR to CA - Provide the CSR to your chosen Certificate Authority
  4. Complete Validation - Verify domain ownership (DV) or organization (OV/EV)
  5. Install Certificate - Install the issued certificate with your private key

Security Best Practices

Private Key Security

  • Never share your private key with anyone
  • Store it in a secure location with restricted access
  • If compromised, revoke your certificate immediately
  • Generate a new key pair for each certificate renewal