Question 1

Is my private key safe?

Accepted Answer

Yes. The key pair is generated entirely in your browser using the Web Crypto API. Your private key never leaves your device and is never sent to any server.

Question 2

What key size should I use?

Accepted Answer

2048-bit RSA is the minimum accepted by most Certificate Authorities and is suitable for most use cases. 4096-bit provides extra security but takes longer to generate and may be slower for TLS handshakes.

Question 3

What are Subject Alternative Names?

Accepted Answer

SANs allow a single certificate to cover multiple domain names. Enter all domains the certificate should be valid for (e.g., example.com, www.example.com).

Question 4

What do I do with the CSR?

Accepted Answer

Submit the CSR to a Certificate Authority (CA) like Let's Encrypt, DigiCert, or Sectigo. They will issue an SSL/TLS certificate based on your CSR. Keep the private key secure on your server.

Question 5

Why does 4096-bit take longer?

Accepted Answer

Larger key sizes require more computation. The browser's Web Crypto API generates the key locally, which may take several seconds for 4096-bit keys.

CSR Generator

About this tool

Frequently Asked Questions

Related Tools

CSR Decoder

SSL Certificate Decoder

Popular Tools