OpenSSL Command Generator
Build correct OpenSSL commands in seconds. Pick a task, fill in the file names and options, then copy the ready-to-run command into your terminal. Nothing runs here and nothing is uploaded — the command text is created in your browser only.
Security note: A private key is a secret. Never share it, never paste it into a website, and keep a safe offline backup. Run the generated commands on your own computer. Set file permissions so only you can read key files:
chmod 600 your-key.key
How to use
- Choose a task from the list, for example generating an RSA private key or a self-signed certificate.
- Fill in the fields that appear: key size, number of days, your certificate details (CN, O, C) and the input and output file names.
- The command is generated live. Click Copy command and paste it into your terminal on a machine with OpenSSL installed.
- For the key-match check, run both shown commands: if the two hashes are identical, the key and certificate belong together.
Note: Commands are only generated as text in your browser; nothing is executed or uploaded. A larger key size (3072 or 4096 bits) is more secure but slightly slower. PEM is the default text format OpenSSL uses; DER is the binary form; PFX/PKCS12 bundles a certificate and key into one password-protected file.