CSR Generator

Generates Certificate Signing Requests (CSR) and private keys for SSL certificates.

Common Name (CN / Domain):

Organization (O / Company):

Organizational Unit (OU):

Email Address:

Locality / City (L):

State / Province (ST):

Country (C / 2-letter):

Subject Alternative Names (SANs, comma-separated):

Key Type:

Key Length (RSA):

Enter your email address to unlock the detailed AI resolution report with concrete optimization suggestions and step-by-step instructions for free.

Guide & best practices

CSR Generator for TLS certificates with SAN support

Create clean Certificate Signing Requests with all required fields and a secure key pair as the basis for certificate issuance.

Useful before requesting TLS certificates, for multi-domain/wildcard certificates and when switching key type from RSA to ECDSA.

Enter CN, SAN and organization data and choose key type/length; Balou generates the CSR and matching private key client-side.

List every required hostname as SAN, pick RSA 2048+ or ECDSA P-256, protect the private key and never share it.

Which fields belong in a CSR?

The Common Name (CN=domain) is required; add O, OU, L, ST and C plus SAN for multiple hostnames.

RSA 2048 vs 4096 vs ECDSA?

RSA 2048 is standard, RSA 4096 is stronger but slower, ECDSA P-256 is fast at comparable security.

Is my private key stored?

No, the key is generated locally/client-side and must never be shared or uploaded.

Why use SAN in a CSR?

Subject Alternative Names allow multiple domains or wildcards in one certificate – modern clients validate SAN only.