CSR

CSR Generator

Create a private key and CSR without the command line. Everything runs in your browser and the key is never sent to us; save it securely before you leave the page.

Certificate type (validation)

Coverage

Common name (domain) *

Key type

Organisation

Organisational unit (optional - no longer shown in certificates)

City / locality

State

Country

Email (optional)

Everything runs in your browser using WebCrypto. Your private key is generated on your device and is never sent to us. ECC keys need a server that supports them (all current Apache, Nginx, IIS and cPanel versions do).

Next step Paste your CSR at Set up →Check your CSR with the decoder →

After you generate

Save the private key where only your server admin can read it, and never email it or paste it into a ticket. Paste the CSR at Set up in your dashboard. You'll need the key again to install the certificate.

Browser or server?

For production servers, generating the key on the server itself (OpenSSL, cPanel, Plesk or IIS) avoids moving the key at all. Our CSR guide shows how. How to generate a CSR on your server →

Common questions

Is a browser-generated key safe?

The key is created by your browser's built-in cryptography and never leaves your device. Once downloaded, store it as carefully as any server key.

RSA or ECC?

RSA 2048-bit is the widely compatible default; ECC P-256 or P-384 gives smaller, faster keys. Both are accepted.

I closed the page without saving the key.

Generate a new key and CSR. If a certificate was already issued for the lost key, request a free reissue with the new CSR.