Como usar: CSR Decoder
- Paste the CSR (
-----BEGIN CERTIFICATE REQUEST-----) or open the.csrfile. - Check the Common Name and the Subject Alternative Names — every domain you need must be listed.
- Confirm the key type and size (RSA 2048+ or EC P-256/P-384).
What is a CSR?
A Certificate Signing Request (PKCS#10) is what you send to a certificate authority to get a TLS certificate. It contains your public key, the identity you want in the certificate and any requested extensions such as Subject Alternative Names, all signed with your private key to prove you hold it. The private key itself never leaves your server.
Checklist before submitting
- Domains: every hostname — including
wwwand bare domain — must appear in the SAN list. Many CAs copy the CN into the SANs, but not all. - Key: RSA 2048 bits or more, or ECDSA P-256 / P-384. Smaller RSA keys are rejected.
- Organization fields: for OV/EV certificates, O, L, ST and C must match your legal registration exactly. For DV certificates they are ignored.
- Signature: SHA-256 or better.
Creating a CSR with OpenSSL
openssl req -new -newkey rsa:2048 -nodes \
-keyout example.key -out example.csr \
-subj "/CN=example.com" \
-addext "subjectAltName=DNS:example.com,DNS:www.example.com"Keep example.key secret and on the server. After the CA issues the certificate, decode it with the certificate decoder and check the live site with the SSL checker.
Também pesquisado como: decode csr, csr checker, csr viewer, certificate signing request decoder, check csr, pkcs10 decoder.
Ferramentas que combinam com: CSR Decoder
- RSA Key Generator — Create a public/private key pair for JWT signing, TLS testing, encryption experiments or SSH — generated by your browser’s Web Crypto API and never sent anywhere.
- SSH Key Generator — Create an SSH key pair for GitHub, GitLab, servers or CI deploy keys — Ed25519 by default, in standard OpenSSH format, without installing anything.
- DNS Lookup — Query all common DNS record types for a domain in one go, with TTLs, sorted MX records and an SPF/DMARC email-authentication summary.
- Decodificador JWT — Cole um JSON Web Token para analisar seu cabeçalho e sua carga, verificar quando ele expira e conferir sua assinatura.
Perguntas frequentes
Does a CSR contain my private key?
No. It contains only the public key and is safe to share with the certificate authority. Keep the private key on your server.
Why are my extra domains missing?
They must be requested as Subject Alternative Names. Recreate the CSR with
-addext "subjectAltName=DNS:…" or the SAN field in your control panel.Is my CSR uploaded?
No. It is decoded in your browser.
Posso instalar o CSR Decoder como um aplicativo da web e usá-lo offline?
Sim. O CSR Decoder é um aplicativo da web instalável (PWA) — instalado a partir do seu navegador, não baixado de uma loja de aplicativos. Clique em “Instalar aplicativo” na parte superior desta página no Chrome ou no Edge (Windows, macOS, Linux, ChromeOS) ou, no Android, use “Compartilhar” → “Adicionar à tela inicial” no iPhone e no iPad, ou “Arquivo” → “Adicionar ao Dock” no Safari 17+ em um Mac. Em seguida, ela se abre em uma janela própria com seu próprio ícone e, como é executada inteiramente no seu navegador, continua funcionando offline. O Firefox no desktop não permite a instalação de aplicativos da web. Como funciona a instalação.