CSR Generator
Generate a Certificate Signing Request (CSR) and private key instantly. Fill in your domain details, download both files and submit the CSR to your Certificate Authority.
Frequently Asked Questions
What do I do with the generated CSR?
Submit the CSR text (starting with -----BEGIN CERTIFICATE REQUEST-----) to your Certificate Authority (CA) such as Lets Encrypt, DigiCert, Comodo or ZeroSSL. The CA will verify your domain and issue an SSL certificate.
Is the private key generated securely?
The private key is generated server-side using PHP's OpenSSL extension. It is never logged or stored. For maximum security, generate your CSR locally using the OpenSSL command: openssl req -new -newkey rsa:2048 -nodes -keyout private.key -out request.csr
What is the difference between 2048 and 4096 bit keys?
2048-bit keys are the current standard and are considered secure. 4096-bit keys are stronger but slower for TLS handshakes and use more CPU. For most websites, 2048-bit is sufficient. High-security applications may prefer 4096-bit.