Skip to content
All tools

CSR Generator & Decoder

Generate a new RSA key pair and signed CSR to send to any certificate authority, or decode a CSR you already have to double-check it before sending.

Only Common name and Subject alternative names are used by Let's Encrypt and other publicly-trusted (domain-validated) CAs — they issue purely on proof of domain control. Organization, organizational unit, locality, state, country and email are all optional here and will be silently dropped from a Let's Encrypt certificate; keep filling them in if this CSR is going to a private/internal CA that supports organization info (OV/EV certificates).

Generated with the browser's native WebCrypto API.

Runs entirely in your browser. Certificates, keys and passwords you enter here are processed locally with JavaScript and are never uploaded or sent to any server — nothing is stored, logged or transmitted.