Wonderstacked

Security

CSR Generation

A CSR is the signed request you send to a certificate authority to obtain an SSL certificate. It contains your public key and identifying details, and is signed by the matching private key — which never leaves your machine. This tool generates both in the browser using node-forge.

Last updated · Free, no signup

Loading interactive CSR Generation…

What is a certificate signing request?

A certificate signing request, or CSR, is a PKCS#10 structure containing a public key and identifying subject fields, signed by the corresponding private key. A certificate authority uses it as the input for issuing a certificate while the private key remains with the requester.

The generator creates a 2048-bit RSA key and SHA-256-signed PEM CSR locally with node-forge. Common name is required, while organization and two-letter country are optional. Review every field before submission and back up the private key securely; a CA cannot recover it if it is lost.