Free PKI tool

Free Key Pair & Self-Signed Certificate Generator

Generate a fresh RSA or ECC key pair, with an optional self-signed certificate, for local development, internal testing, or any environment where a CA-issued certificate isn't needed yet.

Open in full-page tool suite →
How it works

Three steps, nothing leaves your browser

Pick a key type & size

RSA (2048/4096-bit) or ECC (P-256/P-384).

Optionally self-sign

Add subject details and a validity period to generate a self-signed certificate alongside the key.

Download both files

Generated locally in your browser — ready for local dev, staging, or internal tools.

Questions

Common questions

When should I use a self-signed certificate instead of a CA-issued one?

For local development, internal testing, or staging environments where you control both ends of the connection and don't need public trust.

Is this safe to use for production traffic?

No — browsers and clients won't trust a self-signed certificate by default. Use a CA-issued certificate (see SecureCLM Pro) for anything public-facing.

Is the key generated locally?

Yes — entirely client-side in your browser, nothing is uploaded.