PKI Key Pair Generator: Self-Signed Certs and CSRs in the Browser

Local HTTPS, mTLS prototypes and internal services often start with self-signed certificates or CSRs submitted to an internal CA. OpenSSL one-liners work, but PEM formatting mistakes are common.

The PKI Key Pair Generator produces:

• Key pair — RSA 2048/4096 PEM public/private blocks
• Self-signed certificate — CN, org, country and validity days
• CSR — PKCS#10 request for your CA to sign

Inspect issued certs with the PEM Certificate Inspector.

Self-signed certificates are for development and testing only. Production TLS should use a trusted public or private CA.

PKI Key Pair Generator