Developer ToolsGeneratorsFree Tool
CSR Generator
Get the exact OpenSSL command and step-by-step instructions to generate a real Certificate Signing Request — this tool does not generate a CSR file itself.
How to Use CSR Generator
- 1Enter your domain name
- 2Click Process
- 3Copy and run the openssl command in your terminal to generate your real private key and CSR
- 4Submit the resulting .csr file to your Certificate Authority
Frequently Asked Questions
No — building a real, correctly-signed PKCS#10 CSR requires ASN.1/DER encoding that isn't available through browser APIs without an external library. Instead, this tool gives you the exact `openssl req` command to run yourself, which generates both your private key and the CSR together.
A CSR must be cryptographically signed by the private key it's submitted alongside, in a specific PKCS#10 structure — that signing/encoding step is what can't be done in-browser. The OpenSSL command handles key generation and CSR signing together correctly in one step.
Submit the .csr file to your chosen Certificate Authority (DigiCert, Sectigo, ZeroSSL, Let's Encrypt, etc.), or use certbot for automated free certificate issuance via Let's Encrypt.
Yes — it's substituted into the command's file names and the certificate subject's Common Name (CN) field.
Related Tools
UUID Generator v4
Generate a random RFC 4122 version 4 UUID with the version and variant bits set correctly.
UUID Generator v1
Generate a real RFC 4122 version 1 (time-based) UUID, encoding the current timestamp plus a randomly-generated node identifier.
NanoID Generator
Generate a cryptographically random, URL-friendly ID using the same 21-character length and default alphabet as the popular nanoid library.
ULID Generator
Generate a real, spec-compliant ULID — a 26-character, lexicographically sortable ID with a Crockford base32-encoded timestamp and random suffix.