FlinkTools

CSR and key generator

Make a private key and a certificate request to send to your certificate authority.

Processed on your device, never uploaded

Request

Other domains or IP addresses, one per line. The common name is added for you.
Key type

About this

  • The private key is made in this browser and never leaves it.
  • Send only the CSR to your certificate authority.
  • Install the certificate you get back together with this key.

What it does

The CSR and key generator makes the two things you need to get an SSL or TLS certificate: a certificate signing request (CSR) to send to your certificate authority, and the private key that stays on your server. Choose RSA 2048, RSA 4096 or ECDSA P-256, add more domain names or IP addresses, and fill in your organisation if the authority asks for it. Everything is made in your browser.

How to use it

  1. 1Enter the domain, and any other names it should cover.
  2. 2Pick the key type and make the request.
  3. 3Send the CSR to your certificate authority and keep the private key safe.

Questions

Does the private key leave my device?

No. It is made in your browser with WebCrypto. We never see it and keep no copy, so save it before you leave the page.

Which key type should I pick?

ECDSA P-256 is small and fast and works in every current browser. Pick RSA 2048 if an older system needs it, and RSA 4096 only if you must.

Can it cover several names?

Yes. Add extra domains, wildcards such as *.example.com, or IP addresses, one per line.

AD320 × 100