OpenSSL Command Generator
Build correct OpenSSL commands for certificates, CSRs, key pairs and conversions.
Runs 100% in your browser — nothing is ever uploaded.
What is OpenSSL Generator?
OpenSSL commands are long, position-sensitive and easy to get wrong. This free generator writes them for you: create self-signed certificates with SAN entries, generate CSRs with fresh private keys, inspect certificates and CSRs, check a live site's expiry date, convert between PEM and PFX/PKCS#12, generate RSA or ECDSA key pairs, and produce random secrets. Choose your key size and validity period and copy the finished command.
How to use OpenSSL Generator
- Open the tool — no signup, no upload, everything runs in your browser.
- Fill in the options in the form; sensible defaults are pre-selected.
- The OpenSSL command generator output updates instantly with every change you make.
- Copy the result or download it as a ready-to-use file.
Frequently asked questions
Is this OpenSSL command generator free to use?
Yes — this OpenSSL command generator is completely free with no signup, no limits, and no watermarks. Use it as often as you like.
Why do I need a SAN in a self-signed certificate?
Modern browsers ignore the Common Name and require a subjectAltName (SAN) entry to validate the domain. Without a SAN, Chrome and Firefox show certificate errors even when the CN matches — the generator adds SAN entries for the domain and its www variant automatically.
Is my data private?
Completely. Everything you type stays in your browser — nothing is uploaded to any server, so commands, keys and data never leave your machine.
Do these tools touch my servers?
No. OpsForge tools are pure calculators and generators that run in your browser — they never connect to your infrastructure. You copy the result and apply it yourself.
Is the chmod calculator accurate for all systems?
Yes — octal permission notation is a POSIX standard, so the results apply identically on Linux, macOS and BSD.
Will more DevOps tools be added?
Yes — Dockerfile, docker-compose, nginx and CI config generators are on the roadmap. Everything will stay free and client-side.