Developer Tools

PKI Toolkit — Keys and Certificates in the Browser

Generate RSA keys, a self-signed CA, server/client certificates, and CSRs locally, and parse PEM. Useful for local HTTPS without installing OpenSSL.

CertificatePKIRSA

Favorite this tool

No favorite storage mode has been selected.

Quick actions

Copy this tool URL or open the system share sheet on a supported device.

Use cases

  • Quick self-signed HTTPS for local dev
  • Create a CA and issue server/client certs
  • Generate a CSR for a real CA
  • Inspect PEM certificates
  • Generate RSA key pairs

How to use

  1. Generate an RSA key pair
  2. Create a self-signed CA
  3. Issue a server cert with SAN (CA-signed or self-signed)
  4. Paste PEM to inspect details

Example input and output

Flow

CA + server cert issuance

Output

ca_cert.pem + server_cert.pem + server_key.pem

FAQ

OK for production?

Self-signed certs are for testing. Use Let’s Encrypt or a commercial CA in production.

Are keys uploaded?

No. Generation and signing stay in the browser.

Which key sizes?

1024 (test only), 2048 (recommended), and 4096 (higher security).

How do I CA-sign a server cert?

Generate the CA first, then choose “Sign with CA” and import the CA cert and key.

Tools

Related tools

Continue with another translated tool for a nearby task.

RSA Key Generator

RSA Key Generator — Online PEM Key Pair Tool

Available

Generate RSA public and private keys locally with WebCrypto and export PEM format for signature testing, API key exchange, and local experiments without a server call.

RSA Keys PEM

SSL Certificate Parser

PEM X.509 Certificate Parser

Available

Parse PEM X.509 certificates locally to read validity, subject-related fields, and DER size. Lightweight inspection without full chain trust validation.

SSL Certificate X.509

Hash Generator

Hash Generator - SHA Digests and Compare

Available

Compute SHA-1, SHA-256, SHA-384, and SHA-512 digests for text or local files, with optional HMAC mode and hash comparison. Uses Web Crypto in the browser for checksum and signing checks.

Hash SHA Digest