The SSLFOR CSR Generator creates an RSA private key and Certificate Signing Request directly in the browser. Choose 2048, 3072 or 4096-bit RSA, enter the certificate subject, and add DNS names or IPv4 addresses as Subject Alternative Names.
The CSR is signed with SHA-256. The private key remains in the browser and is downloaded only when you choose to save it. Store that key securely because the certificate issued from the CSR will depend on the corresponding private key.
After a CA issues the certificate, use the CSR + Certificate Matcher or Key Matcher to confirm that the issued certificate still corresponds to the original request and private key.