Comment utiliser : CSR Decoder
- Paste the CSR (
-----BEGIN CERTIFICATE REQUEST-----) or open the.csrfile. - Check the Common Name and the Subject Alternative Names — every domain you need must be listed.
- Confirm the key type and size (RSA 2048+ or EC P-256/P-384).
What is a CSR?
A Certificate Signing Request (PKCS#10) is what you send to a certificate authority to get a TLS certificate. It contains your public key, the identity you want in the certificate and any requested extensions such as Subject Alternative Names, all signed with your private key to prove you hold it. The private key itself never leaves your server.
Checklist before submitting
- Domains: every hostname — including
wwwand bare domain — must appear in the SAN list. Many CAs copy the CN into the SANs, but not all. - Key: RSA 2048 bits or more, or ECDSA P-256 / P-384. Smaller RSA keys are rejected.
- Organization fields: for OV/EV certificates, O, L, ST and C must match your legal registration exactly. For DV certificates they are ignored.
- Signature: SHA-256 or better.
Creating a CSR with OpenSSL
openssl req -new -newkey rsa:2048 -nodes \
-keyout example.key -out example.csr \
-subj "/CN=example.com" \
-addext "subjectAltName=DNS:example.com,DNS:www.example.com"Keep example.key secret and on the server. After the CA issues the certificate, decode it with the certificate decoder and check the live site with the SSL checker.
Aussi recherché comme : decode csr, csr checker, csr viewer, certificate signing request decoder, check csr, pkcs10 decoder.
Outils complémentaires : CSR Decoder
- RSA Key Generator — Create a public/private key pair for JWT signing, TLS testing, encryption experiments or SSH — generated by your browser’s Web Crypto API and never sent anywhere.
- SSH Key Generator — Create an SSH key pair for GitHub, GitLab, servers or CI deploy keys — Ed25519 by default, in standard OpenSSH format, without installing anything.
- DNS Lookup — Query all common DNS record types for a domain in one go, with TTLs, sorted MX records and an SPF/DMARC email-authentication summary.
- Décodeur JWT — Collez un JSON Web Token pour examiner son en-tête et sa charge utile, vérifier sa date d'expiration et valider sa signature.
Questions fréquentes
Does a CSR contain my private key?
No. It contains only the public key and is safe to share with the certificate authority. Keep the private key on your server.
Why are my extra domains missing?
They must be requested as Subject Alternative Names. Recreate the CSR with
-addext "subjectAltName=DNS:…" or the SAN field in your control panel.Is my CSR uploaded?
No. It is decoded in your browser.
Puis-je installer CSR Decoder en tant qu’application web et l’utiliser hors ligne ?
Oui. CSR Decoder est une application web installable (PWA) : elle s’installe depuis votre navigateur, sans passer par une boutique d’applications. Cliquez sur « Installer l’application » en haut de cette page dans Chrome ou Edge (Windows, macOS, Linux, ChromeOS) ; sur Android, utilisez « Partager » → « Ajouter à l’écran d’accueil » sur iPhone et iPad ; ou « Fichier » → « Ajouter au Dock » dans Safari 17+ sur Mac. L’application s’ouvre alors dans sa propre fenêtre avec sa propre icône, et comme elle s’exécute entièrement dans votre navigateur, elle continue de fonctionner hors ligne. Firefox sur ordinateur de bureau ne permet pas d’installer d’applications web. Comment fonctionne l’installation.