Certificate Signing Request Generator

This site creates PKCS #10-conforming Certificate Signing Requests and an accompanying RSA 2048-bit Private Key entirely in your browser, without the server ever learning what your key material looks like.

It can therefore replace `openssl req` and `openssl rsa` in a rather more user-friendly manner, if you can live with its imposed limitations and/or requirements. To see what it can do, you can click the button to , and then submit the form.

CSR X.509 Input Data:








Computed Output:



↑ Paste this into `openssl req -noout -text`




↑ Paste this into `openssl rsa -noout -text`

All the cryptographic and algorithmic heavy lifting is performed by the excellent PKI.js and Asn1.js JavaScript libraries, created by Yury Strozhevsky, and Copyright ©2014 by GMO GlobalSign & Copyright ©2015 by Peculiar Ventures. A modern browser (like Mozilla Firefox) supporting the WebCrypto API is required for this to work.

This document is Copyright ©2015 by Johannes Truschnigg and licensed under the terms of the MIT License.