Free CSR Generator - Create your CSR and Private Key

When you buy SSL Certificates, you will need a Certificate Signing Request (CSR) and a Private Key to complete the configuration and installation. You will need this for every SSL you order from a genuine Certificate Authority, such as Geotrust , DigiCert , Sectigo and Thawte . You can generate the CSR and the key for your SSL Certificate online with our free tool, which is featured below. Just be sure to complete all of the steps and save it somewhere safe.

Enter your Domain, Email or Business Name. If this is for an SSL/TLS Certificate, enter your domain name into the Common Name field. If for a SMIME Certificate , enter your email address. For a Code Signing Certificate, enter your Business Name.
Fill in your Contact Information. For Business and Extended Validation Certificates, use the legally registered details of your organisation.
Save your CSR and Private Key. Copy & paste the CSR and Key to a text editor (i.e. Notepad) and save it as .txt file, or you can download the files directly - you will need this after ordering an Digital Certificate to go through the SSL generation process devised by the Certificate Authority of your choice.

New and More Secure!

Our new CSR/Key Generator will create your CSR and Key in your browser without submitting any information to our servers, making it more secure than ever.

CSR/Key Type

What is this CSR and Key for?

Encryption Algorithm

Key Length

2048 is secure and recommended.

Signature

SHA256 is recommended.

Domain Name ( Certificate Common Name )

Please enter your domain name. If you are using this for a Wildcard SSL, it needs to be in the format: *.domain.com

Organisation Name

City or Suburb

State or Province

Country

Sorry, there was an error!

There was an error trying to generate your CSR and Key. It is possible your browser is to old and can't run these functions.

The CSR And Private Key created above can be used with all Certificate Authorities

Frequently asked questions

: A Certificate Signing Request (CSR) is a pivotal component in the process of obtaining a digital certificate from a Certificate Authority (CA). It serves multiple purposes, including:
Authentication: A CSR ensures that the requestor is the legitimate owner of the domain for which the certificate is being requested. This is critical for maintaining the security and trustworthiness of online transactions and communications.
Information Provision: It provides essential information about the entity requesting the certificate, such as the organisation's name, domain name, locality, and country. This information is necessary for the CA to generate a certificate that accurately represents the entity.
Public Key Submission: The CSR includes the public key that will be included in the certificate. The corresponding private key, not transmitted to the CA, creates a secure connection with the public key.
In summary, CSR is a critical step in securing a digital certificate that enables encrypted and secure communication over the internet, ensuring that data transmitted between web servers and browsers remains private and integral.
: To create a Certificate Signing Request (CSR), you must follow several steps. This process typically involves generating a Private Key and then using that key to create the CSR which contains the Public Key.
The Process
Generate a Private Key: The first step is to generate a private key. The private key should be kept secure and never shared.
Create the CSR with Public Key: Using the private key, you will create the CSR. A Public Key will be created and added to the CSR. This Public Key will be linked to the previously created Private Key. The CSR will also contain information such as your organisation's name, the domain name for which the certificate is requested, and your country.
Submit the CSR to a Certificate Authority (CA): Once the CSR is generated, you need to submit it to a trusted CA. The CA will validate your details and issue a certificate based on the CSR.
Open SSL Commands
You can use the following command to generate the Key and CSR via your OpenSSL command line:
openssl req -newkey rsa:2048 -keyout PRIVATEKEY.key -out MYCSR.csr
Online in Browser
You can generate your CSR and Private Key in your browser using the free tool above on this page, offered by SSLTrust.
: Certificate Signing Requests (CSRs) are not inherently confidential documents. A CSR is designed to be submitted to a Certificate Authority (CA) to request a digital certificate. The information within a CSR includes:
The Public Key of the certificate requester.
Identification details include the organisation name, common name (domain name), and location.
This information is intended to be public and is embedded within the digital certificate issued by the CA. However, the CSR does not contain the Private Key, which should always be kept strictly confidential and secure.
While the CSR itself is not confidential, care should be taken to ensure that only the Public Key and the necessary identification details are included and that the Private Key is never accidentally exposed or transmitted.
: A Certificate Signing Request (CSR) is typically encoded in PEM format (Privacy Enhanced Mail). It contains encoded information about the certificate request. Here is what a CSR might look like:
-----BEGIN CERTIFICATE REQUEST----- MIICcDCCAVgCAQAwGjEYMBYGA1UEAwwPc3NsdHJ1c3QuY29tLmF1MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYzV5+Uk03kWp+Zh2P9X9j1oqkPxM/0O xhsdrv+yqK08dMVIf0b+icR2XCxw1JmTfzIbJ3Wf0zTo2Wbo1dxl+can9WIqdMC/ uULFEYATcPEwmpE7uqeVI1ZxKEx5ekEabI6VdJb0b3LoxO3KEi3qQPx0ALtbrM75 6nQ7YRfxEq86RSUz2CHT4+5ls+puvuRBlv+Tk2VDew4CzMRRBAnnItEafIqZ0HM2 LgoL/fkKbmKlBXycgjFpat+60nlhAkT9g/rHpdbqn6KxCrTI+6qNidRSXkfwVrUF MXpxPsIxIKXYokaiWwg0VmWIjX4knGoVd/P0nPo1T21qtEZVxkMOpwIDAQABoBEw DwYJKoZIhvcNAQkOMQIwADANBgkqhkiG9w0BAQsFAAOCAQEAL7GSw6jBYhAeRx8e es4VG4tc7lDgajhEwfn29NpP/A2l6GYTxvtrhwj/dnsbaKxMX/SsVf9JuvRtvTI8 dZCMuP6N6fyYxhKSmb8Ha1nS9L4X069nrNy6wDlBYNuYVrk/Iifl5OCjuWobpw/f zsJmA4KkaoWvHj/ED2EWmnYviWbVidrlzxPUhLsmINbHcnul3ZgJNtIFI0dWLDlM 80LH+9gXZARyiC6eLG3y6zRG8ICYObhw2AQV9il4yIxRHI6njkpVybI/vwZLxXfG 8KnVO2Xl8QUch3CLJ/Vdcq5nguO01KWt0GjcbJnii6wgTtv3ZXhd7ENJdam7ROn2 VFul/Q== -----END CERTIFICATE REQUEST-----
: If your Certificate has already been issued, you will need the original Private Key created to work with this Certificate. If you no longer have the Private Key, you will need to generate a new one along with a new CSR and then submit a reissue request for a new Certificate. The newly issued Certificate will then work with the newly created Private Key.

Free CSR Generator - Create your CSR and Private Key

Frequently asked questions

The Process

Open SSL Commands

Online in Browser