RSA key & CSR generator
Guard your private key. Keys are generated in JS here — don’t leak them. Only hand CSRs to CAs you actually use.
RSA key pair (PKCS#8 + SPKI PEM) and optional CSR (SHA-256).
Using keys and CSRs
Submit the CSR to your certificate authority; keep the private key offline or in a secure HSM or secret store. For TLS, the CN or SAN in the issued certificate should match hostnames clients use.