Generator
Online SSL certificate generator.
Create a self-signed SSL certificate, localhost HTTPS cert, CSR, Root CA, host certificate, or mTLS client certificate. Everything runs in this tab. Download before you leave.
Which type should I pick?
A certificate binds a public key to a name. The type is about who presents it.
Root CA
Your private authority. Trust it once, then issue host certs from it.
Host certificate
A server cert signed by that CA. Put it on nginx, Caddy, or the host.
Self-signed TLS
One-off HTTPS when you do not want to run a CA.
Client certificate
Prove who is calling. mTLS for APIs, bots, and devices.
CSR
Ask a public or company CA to sign a public site. Keep the .key.
Before you generate
All best practices- Download the key before you leave this page.
- For many hosts: forge a Root CA, trust it once, then issue host certs.
- Put every hostname you will type into the host SANs.
- Never email a CA or host .key. Send a CSR only if a public CA must sign it.