Generate OpenSSL-compatible CSRs and private key pairs client-side using Web Crypto.
Execution runs 100% locally inside the browser sandbox using HTML5 Canvas, Web Cryptography Subtle API, and Web Workers. Zero egress.
Zero network latency. Operates completely offline with zero dependencies on third-party backend servers or cloud services.
Built according to official RFC specifications, cryptographic test vectors, and enterprise-grade data transformation standards.
Provide the Common Name (FQDN), Organization, and Country code.
Choose RSA 2048-bit or RSA 4096-bit key strength.
Download your .csr request and store your .key private key securely.
Never. Keys are generated inside your browser using the W3C Web Cryptography API. Private keys never leave your device.
Submit the generated .csr text to your SSL Certificate Authority (e.g. Let's Encrypt, Sectigo, DigiCert).
Zero-egress companion tools in the Security & Network suite
Audit CSP, HSTS, X-Frame-Options, and security headers with OWASP grading (A+ to F).
Measure cryptographic randomness, Shannon entropy (0-8 bits/byte), Chi-square test, and byte distributions.
Generate secure RFC 6238 Base32 TOTP secret keys and standard otpauth:// URIs for Google Authenticator.
Construct and validate HTTP CSP headers and meta tags.