CSR Generator - Create Certificate Signing Requests
Learn how to create Certificate Signing Requests (CSRs) for SSL/TLS certificates. Understand the CSR format and required information for certificate authorities.
Educational Tool
This is a demonstration tool. For production CSR generation, use OpenSSL or your web server's certificate tools.
Generate Certificate Signing Request
CSR Best Practices
- • Use 2048-bit or 4096-bit RSA keys
- • Keep your private key secure and never share it
- • Use accurate organization information
- • For production, use OpenSSL:
openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr
What is a CSR?
A Certificate Signing Request (CSR) is a block of encoded text that contains information about your organization and the domain you want to secure. You generate a CSR on your server and submit it to a Certificate Authority (CA) to obtain an SSL/TLS certificate.
CSR Components
Common Name (CN)
The fully qualified domain name (FQDN) for your website (e.g., www.example.com)
Organization (O)
The legal name of your organization or company
Organizational Unit (OU)
The division of your organization handling the certificate (e.g., IT Department)
Locality/City (L)
The city where your organization is located
State/Province (ST)
The state or province where your organization is located
Country (C)
Two-letter ISO country code (e.g., US, UK, CA)
Generating CSR with OpenSSL
For production use, generate CSRs using OpenSSL:
# Generate private key and CSR openssl req -new -newkey rsa:2048 -nodes \ -keyout domain.key -out domain.csr # Generate CSR from existing key openssl req -new -key domain.key -out domain.csr # View CSR contents openssl req -text -noout -verify -in domain.csr
CSR Workflow
- Generate a private key and CSR on your server
- Submit the CSR to a Certificate Authority (CA)
- CA validates your information and domain ownership
- CA issues an SSL/TLS certificate
- Install the certificate on your server with your private key