WhoDNS

Generate CSR

Generate a Certificate Signing Request (CSR) and private key. You can also pre-fill values from an existing CSR.

Identity Information

The primary domain for which the certificate will be issued (without www).

Subject Alternative Names (SAN)

One domain per line — for Wildcard use *.example.com syntax.

Pre-fill from Existing CSR

The Subject and SANs from the existing CSR will be read and the form will be pre-filled.

Frequently Asked Questions

What is a CSR?
A CSR ("Certificate Signing Request") is a file you send to a certificate authority to issue an SSL certificate; it contains your domain info and public key.
What should I put in CN, Organization and Country?
CN is the main domain (e.g. example.com), Organization is your legal org name, and Country is the two-letter country code. For DV certificates usually only the domain matters.
Should I choose a 2048 or 4096 key size?
2048-bit is secure and fast for most sites; 4096-bit is more secure but a bit slower. Most authorities accept 2048.
Where do I keep the private key?
Keep the private key secure and confidential and never share it; without it the issued certificate is unusable.