What is a CSR and why do I need to generate one?
A Certificate Signing Request (CSR) is a block of encrypted text that contains your organization's information. It's required when applying for an SSL certificate. Our free CSR Generator creates both the CSR and a private key that you'll need to install your certificate.
Is it safe to use online SSL tools?
Yes, our SSL tools are 100% safe. All processing happens client-side in your browser - your private keys and sensitive data never leave your device. We don't store, log, or transmit any of your certificate data to our servers.
How do I check if my SSL certificate is valid?
Use our SSL Checker tool by entering your domain name. It will analyze your certificate's validity, expiration date, certificate chain, issuer information, and detect any security issues like protocol vulnerabilities or configuration problems.
What certificate formats can I convert between?
Our Certificate Converter supports all major formats including PEM, DER, PFX/PKCS#12, and PKCS#7. You can convert certificates for use on different server platforms like Apache, Nginx, IIS, Tomcat, and more.
How do I verify my private key matches my certificate?
Use our Key Matcher tool to paste both your private key and certificate. The tool will compare the modulus of both to confirm they form a valid key pair. This is essential before installing your SSL certificate.
What does the CSR Decoder show me?
The CSR Decoder extracts and displays all information contained in your CSR including: Common Name (domain), Organization, Country, State, Locality, Email, Key Size, and Signature Algorithm. This helps verify your CSR is correct before submission.
How do I decrypt a password-protected private key?
Use our Certificate Decryptor tool. Paste your encrypted private key and enter the passphrase. The tool will decrypt it locally in your browser, giving you an unencrypted key for server installation. Your passphrase is never transmitted.
What does the Certificate Decoder show me?
The Certificate Decoder extracts all information from your PEM-encoded SSL certificate including: Subject (domain, organization), Issuer (CA details), Validity period (Not Before/After dates with days remaining), Serial Number, Signature Algorithm, Public Key details, Subject Alternative Names (SANs), fingerprints (SHA-1, SHA-256), and certificate extensions like Key Usage. This helps verify certificate details before installation.
What are CAA records and why should I check them?
CAA (Certification Authority Authorization) records are DNS records that specify which Certificate Authorities are authorized to issue SSL certificates for your domain. Checking CAA records helps you understand your domain's certificate issuance policy, verify security configurations, and troubleshoot certificate issuance problems.
Are these SSL tools really free?
Yes, all our SSL tools are completely free with no registration required. We provide these tools to help web administrators and developers manage their SSL certificates more easily. There are no hidden fees or usage limits.