Self-signed certificate generator

Fill common name, org, and validity, then generate a 2048-bit key plus PEM cert. Key generation is CPU-heavy and runs in this tab via the Forge library loaded from jsDelivr.

Browsers and CAs will not trust this certificate. Use Let’s Encrypt or your cloud load balancer for public HTTPS. Never use a self-signed cert as “security” on a public checkout.

How to Use

  1. Set CN to localhost or your .test hostname.
  2. Generate and wait — RSA-2048 can freeze a low-end phone for a few seconds.
  3. Download or copy the key and cert. Store them outside git if they matter.
  4. Trust the cert in your OS/browser only for that local hostname.

Key Features

  • RSA-2048 self-signed PEM
  • Configurable CN and validity
  • No FlashKit account
  • Forge runs in-page (CDN script — not a FlashKit-hosted CA)

Frequently Asked Questions

Will Chrome show a padlock on production?

Not with a self-signed cert. Users will see a warning. Buy or issue a publicly trusted cert.

Do you keep the private key?

FlashKit does not store it. The key still existed in this tab’s memory. Close the tab when done.

Related Tools