ToolsCSR generator
CSR generator
Private key
The private key was generated in your browser and never sent anywhere, so you hold the only copy. Download it and keep it safe now: reloading or closing this page loses it, and nobody can recover it. If you lose it, you will need a new CSR and a reissued certificate.
How to use the CSR
- Copy the whole CSR, including the BEGIN and END lines.
- Paste it into the CSR box when you order or activate the SSL, then validate the domain the way your provider asks (email, DNS or file).
- When the certificate arrives, install it with the .key file you just saved. Windows servers need a .pfx file: use the SSL to PFX converter.
Generate a CSR for an SSL certificate
A CSR is the block of text you paste into an SSL order so the provider knows which domains the certificate is for. This tool makes the CSR and its private key right in your browser. The private key is never sent anywhere, so download it and keep it safe.
What is a CSR?
A CSR (Certificate Signing Request) holds your domain names, organisation details and public key. The SSL provider uses it to issue the certificate. It does not contain the private key, so it is safe to send.
Is the private key sent to your server?
No. The key is made on your own device; our server never receives or stores it. That also means you hold the only copy: reloading the page loses it, and a lost key means a new CSR and a reissued certificate.
2048 or 4096-bit key?
2048 bits is secure, accepted by every SSL provider and fast on the server. 4096 bits is longer and only worth it when your own policy asks for it.