Generate CSR

How Our CSR Generator Is More Secure

Most free CSR generation tools are server-based, which means that your private key is generated on the tool’s remote server (a server that’s not controlled by you) then sent via the internet to your browser. This leaves a serious security vulnerability—you don’t know what’s being done with your private key after it’s generated on the server. If your private key is stored and/or compromised, your website’s security will be compromised. This may sound academic, but it’s a very real problem that has impact many websites. In recent years, certificate authorities have been forced to revoke 10,000’s of SSL certificates because the private keys were incorrectly handled by a CSR generator tool.

That’s why we built our tool so everything happens inside your browser, where you have full control and visibility. Our CSR Generation Tool is a client-side app (built using WebCrypto API, PKIjs, & csrhelp) so the private key is generated and displayed inside your browser. Your private key stays private…it’s never even seen by our server. (Want to verify how this works for yourself? Load this page then disconnect from the internet to use the tool fully offline!)