CSR Generator with SANs

Create a certificate signing request and its private key locally — with subject alternative names, ECDSA or RSA.

Self-signed certificateGenerated in your browser

Key type

Common name (CN)usually the main host name

Subject alternative namesDNS names, IPs, emails — one per line

Browsers only look at SANs; the CN is added automatically.

Organization details (optional)

Valid for397 days

Use

Loading Tool...

Help shape CSR Generator with SANs

The bug you just noticed will fade in 3 minutes. The feature idea will vanish after your next tab switch. Crazy peps don't suffer silently.

0/1000

Frequently Asked Questions

No. The key pair is created with your browser's WebCrypto API and only exists in this tab until you download it.

ECDSA P-256 is smaller and faster and every modern client supports it. Pick RSA 2048 only for very old systems that need it.

Yes — browsers ignore the common name. The tool adds the CN to the SAN list automatically.

Yes. Paste it into the Decode tab to see its subject, names, key and whether the signature is valid.