CSR and private-key generator
Generate a PKCS#10 certificate signing request and matching password-encrypted private key in your browser.
Generation runs locally using this browser's cryptographic API. The private key is encrypted before download; Cloudek does not receive or store the names, key, CSR, or passphrase. Prefer the generated random passphrase; a length check cannot measure strength. Use a trusted device and secure both downloaded files.
The CA issues the certificate; this tool does not submit the request, validate CA policy, install a certificate, create a PFX, or prove ownership of a domain. Keep the encrypted key and passphrase separate. Anyone with both can use the key. Private-key handling is security-sensitive: review the generated request and use your organization's approved key-management process. PKCS #10 specification.