Key generation, CSR creation, PKCS#12 packaging, and PEM decoding.
All cryptographic operations run locally in WebAssembly — nothing is sent to a server.
Generate RSA (2048/3072/4096-bit) or EC (P-256/P-384/P-521) private keys and PKCS#10 Certificate Signing Requests with full subject DN and SANs. Browser-based, no keys are sent anywhere.
Decode X.509 certificates, CSRs, and private keys (PKCS#8, PKCS#1 RSA, SEC1 EC). Shows all fields, extensions, key usage, SANs, and SHA-256/SHA-1 fingerprints.
Bundle a certificate chain and private key into a password-protected PKCS#12 (.p12 / .pfx) file for import into browsers, servers, or key stores.