首页Home › 编码与加密Encoding & Crypto
🔐 CSR 证书签名请求生成（含私钥）CSR Generator — Certificate Signing Request
在浏览器本地生成 SSL/TLS 证书申请所需的 CSR 和 RSA 私钥（2048/3072/4096 位，SHA-256 签名）：填写通用名称、多个 SAN 域名（支持 *. 通配符和 IP）、组织和地区信息，一键复制或下载 .csr 与 .key；也可粘贴已有 CSR 解析主题、SAN、密钥长度并校验签名。Generate the CSR and RSA private key (2048/3072/4096-bit, SHA-256) for an SSL/TLS certificate locally in your browser: common name, multiple SANs (wildcards and IPs), organisation and location, then copy or download .csr and .key. Or paste an existing CSR to decode subject, SANs and key size and verify its signature.
私钥和 CSR 都在你的浏览器里用开源库 node-forge 生成，不会发送到任何服务器。把 CSR 提交给证书颁发机构（CA），把私钥保存在服务器上。生成 4096 位密钥可能需要十几秒。Key and CSR are generated in your browser with the open-source node-forge library and never sent anywhere. Submit the CSR to your certificate authority and keep the private key on your server. 4096-bit keys can take a few seconds.
使用说明与常见问题How-to & FAQ
「CSR 证书签名请求生成（含私钥）」是什么？What is the CSR Generator — Certificate Signing Request?
在浏览器本地生成 SSL/TLS 证书申请所需的 CSR 和 RSA 私钥（2048/3072/4096 位，SHA-256 签名）：填写通用名称、多个 SAN 域名（支持 *. 通配符和 IP）、组织和地区信息，一键复制或下载 .csr 与 .key；也可粘贴已有 CSR 解析主题、SAN、密钥长度并校验签名。Generate the CSR and RSA private key (2048/3072/4096-bit, SHA-256) for an SSL/TLS certificate locally in your browser: common name, multiple SANs (wildcards and IPs), organisation and location, then copy or download .csr and .key. Or paste an existing CSR to decode subject, SANs and key size and verify its signature.
如何使用「CSR 证书签名请求生成（含私钥）」？How do I use the CSR Generator — Certificate Signing Request?
填写主域名（CN），在 SAN 中每行写一个附加域名，选择密钥长度后点“生成”。把 CSR 提交给证书机构，私钥下载后妥善保存在服务器上。Enter the main domain (CN), one extra name per line under SAN, choose the key size and Generate. Send the CSR to your CA and store the private key safely on your server.
私钥会被你们看到吗？Can you see my private key?
不会。密钥用开源库 node-forge 在你的浏览器内存中生成，不会发送到任何服务器；关闭页面后就消失，请务必自己下载保存。No. It is generated in your browser’s memory with node-forge and never sent anywhere; it disappears when you close the page, so download it.
现在的证书还看 CN 吗？Do certificates still use the CN?
浏览器只认 SAN 扩展里的域名，所以工具会自动把 CN 也加进 SAN。Browsers only trust names in the SAN extension, so the CN is added to the SAN automatically.
「CSR 证书签名请求生成（含私钥）」免费吗？文件会上传吗？Is the CSR Generator — Certificate Signing Request free? Are my files uploaded?
「CSR 证书签名请求生成（含私钥）」完全免费，无需注册。你输入的内容只在本机浏览器里处理（部分设置会保存在本机方便下次使用），不会上传到任何服务器。The CSR Generator — Certificate Signing Request is free with no sign-up. What you enter is processed only in this browser (some settings are kept locally for next time) and is never uploaded.