Generate Certificate Signing Requests with subject fields, key type selection, and SAN (Subject Alternative Names).
A CSR packages a selected public key, subject fields, and requested Subject Alternative Names into a signed certificate request. The generator creates the corresponding key pair in the browser and uses the private key to sign the request, allowing a certificate authority to verify possession of that key. The common mistake is assuming that a Common Name automatically covers the same hostname as a SAN. Enter every identity that the certificate must represent in the SAN list.
The subject fields describe the requested certificate holder. SAN entries request additional identities, such as DNS names or IP addresses, through the subjectAltName extension. The CSR also contains the generated public key. These values express what is being requested, but the certificate authority determines which subject information and extensions appear in the issued certificate.
Choosing a key type creates a matching public and private key. The public key is embedded in the PKCS #10 request, while the private key signs the request and is not part of the CSR. Generation occurs entirely in the browser, so the key material is not uploaded. The private key must be preserved for use with the resulting certificate.
No. A PKCS #10 CSR contains the public key and a signature produced with the corresponding private key, but not the private key itself. Keep the generated private key secure and associated with this request. If it is lost, a certificate issued from the CSR cannot be used with that key pair.
No, not within the signed request. Changing the encoded subject, SAN list, or public key would make the existing signature invalid. Generate a new CSR with the corrected values instead. A certificate authority may also issue a certificate containing fewer or different values, so inspect the issued certificate separately.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.