DIGITALTRUST

Tools / CSR generator

CSR generator

Create the private key and the CSR in your browser, or copy a ready-made OpenSSL command.

Where does the private key stay? On your computer. The key and the CSR are generated by this browser, with the Web Crypto API, and are not sent to anyone, not even to us. Keep the key somewhere safe: without it the certificate is useless, and nobody can recover it.

Generated locally with the Web Crypto API and the node-forge library. RSA or ECDSA (P-256 and P-384), your choice. ECDSA gives lighter certificates and faster connections; RSA 2048 is the most compatible with older systems.

By API or with AI assistants. This tool works with private keys, so it is not in the API: a private key should never pass through third-party servers. API and MCP documentation.
Other tools

More checks, no sign-up.

SSL/TLS checker

Test the certificate, chain and protocols of any server: website, mail server or API.

Certificate decoder

See what is inside a certificate: names, validity, issuer, validation type and fingerprints.

CSR decoder

Check your certificate request before you send it: names, organisation, key and signature.

Key matcher

Confirm that a certificate, a CSR and a private key belong together.

SSL converter

Tell us where the certificate is going (Plesk, nginx, Windows, HAProxy, Java) and get the right files. PEM, DER, P7B and PFX, without the key leaving your computer.

Certificate Transparency lookup

Find every valid certificate issued for your domain and its subdomains in the public Certificate Transparency logs.

CAA checker

See which Certification Authorities may issue for your domain, before you order.

Email security check

Check SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT for your domain in one test.
CallOrder SSL