csr-generator.sh — client-side, no data leaves this browser

csr generator

generate an RSA key pair and PKCS#10 certificate signing request, entirely in-browser

Common Name (CN) — e.g. www.example.com *

Organization (O)

Organizational Unit (OU)

City / Locality (L)

State / Province (ST)

Country (C) — 2-letter code

Email Address

Subject Alternative Names (SAN) — comma separated, optional

Key Size RSA 2048-bit (standard) RSA 4096-bit (stronger, slower)

// certificate_signing_request.csr

// private_key.pem

Keep this private key safe. It was generated locally in your browser and was never transmitted anywhere. Anyone who has it can decrypt traffic and impersonate this certificate. Save it somewhere secure, upload it directly to your server/CA, and don't paste it into chat, email, or shared drives. Refreshing or closing this page discards it permanently — it is not stored.

runs 100% client-side via WebCrypto/forge.js — no server, no logging, no network calls