OpenSSL Command Generator
Build the exact OpenSSL command for keys, CSRs and certificate checks.
About the OpenSSL Command Generator
Pick a task — generate an RSA or EC key, create a CSR, make a self-signed certificate, inspect a certificate, convert PEM to PFX or test a TLS endpoint — fill in the subject and options, and copy a correct OpenSSL command. No more hunting through man pages for the right flag order.
Examples
Self-signed cert
example.com, 365 daysOutput
Shellopenssl req -x509 -newkey rsa:2048 ...Keyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
Base32 Encoder
Encoders & Crypto
Encode or decode text using RFC 4648 Base32.
Base64 Encoder
Encoders & Crypto
Encode or decode text to/from Base64, UTF-8 safe.
Basic Auth Header Generator
Encoders & Crypto
Build or decode an HTTP Basic Authorization header.
File Base64 Encoder/Decoder
Encoders & Crypto
Convert any file to a Base64 data URI, or decode Base64 back to a file.
HTML Entity Encoder
Encoders & Crypto
Encode or decode HTML entities in text.
JWK ↔ PEM Converter
Encoders & Crypto
Convert JSON Web Keys to PEM and PEM keys back to JWK.
Frequently asked questions
Read more
- OpenSSL commands and key formats, explained without the man page
CSRs, self-signed certificates, PEM vs DER vs PKCS#8 vs JWK, and how to check what a certificate actually contains.
Version 1.0.0 · Updated 2026-08-22 · Runs entirely in your browser