OpenSSL CSR / Self-Signed Certificate Generator
Generate an OpenSSL configuration and commands for creating a private key, CSR and SAN-enabled self-signed certificate locally.
BAOI never generates or receives your private key: the tool only builds commands and a configuration file for you to run on your workstation or server.
Use the tool
Nothing is sent to the server. BAOI generates text only; create the private key locally with OpenSSL.
Use the result with confidence
Recommended workflow
- Use a non-sensitive representative input for creating an OpenSSL CSR or self-signed certificate.
- Run the operation and review the result before copying or exporting it.
- Validate the output in the target application or environment before relying on it.
What to verify
- Verify the hostnames in Subject Alternative Names, not only the historical Common Name.
- Check validity dates, issuer and the complete certificate chain before trusting the result.
- Certificate validity does not assess TLS protocol versions, cipher suites or application security.
Questions about this tool
Which certificate names must I verify?
Check the Common Name only as a legacy hint; modern validation relies on Subject Alternative Names matching every hostname that clients actually use.
What dates and chain elements matter?
Verify notBefore/notAfter, issuer, intermediate certificates, key algorithm and the complete trusted chain.
Does a valid certificate guarantee that the service is secure?
No. It confirms identity and cryptographic validity only; protocol versions, cipher suites, application security and private-key protection still matter.