SCEP Request

RSA

ECC

Paste Existing CSR and Key

SCEP URL

Challenge Passphrase

Domain Names

It is highly recommended to use sigle-use and expiring challenge passphrases when using this tool
This tool is for testing purposes only. Private keys are sent securely via https, but should not be used in production as all keys should be generated locally
On the backend, the open source project SSCEP is used to send SCEP certificate requests
Choose from a 2048 bit RSA Key or 256 bit ECC Key **
All domain names entered are added as Subject Alternative Names
SHA-256 is used as the signature hash
The OpenSSL and SSCEP commands are shown and can be executed securely on a local system
A CSR may be uploaded but it must include a valid challenge passphrase. Some SCEP servers require the challenge passphrase to be encoded as a "PrintableString". These options and more are available using the Advanced CSR Generator

** The SCEP client this tool is built on (SSCEP) doesn't support ECC, but the option exists for future testing