Generate a private key and PKCS#10 Certificate Signing Request (CSR) to submit to a Certificate Authority (like Let's Encrypt or an internal CA), entirely in your browser.
Subject Information
2-letter ISO country code
Comma-separated DNS names and/or IP addresses
Cryptographic Options
Certificate Signing Request (PEM)
Private Key (PEM) — Keep this secret and secure
Submit the CSR to your Certificate Authority. Keep the private key secret — it never leaves your browser and is not recoverable if lost.