wouter-berman/generate-csr

Tool to generate a Certificate Signing Request (CSR) with subject alt names

Generate-CSR

GUI tool to generate a Certificate Signing Request (CSR) written in PowerShell

I have been looking for a Windows GUI tool to create certificate signing requests which would allow for Subject Alt names. DigiCert Certificate Utility for Windows provides such functionality but uses a hashing algorithm which is not secure anymore. There are several Powershell scripts with this functionality, but none provide a GUI. So I decided to write my own. As PowerShell does not include functionality to generate a CSR the script is using CertReq.exe which is included on Windows Machines by default.

Usage

Just run Generate-CSR.ps1 with powershell. The following GUI will be presented:

Only the common name is a technically required field. All other fields are optional but most certificate providers require Organization, City, State and Country. The Subject alt names field can contain multiple host names. IPv4 and IPv6 addresses are also supported. This field is only used when you buy a Multy Domain certificate. If you do not know what to select for Key size and Hash Algorithm just leave the values unchanged. They are fine for normal use. Enter the information you want to include in the certificate.

You can also read the certificate properties of a supplied url and hit Fill from URL:

After supplying the information hit "Create CSR". You will be asked to provide a name and location for the generated CSR file:

Generating a CSR on a Windows machine requires administrative permissions. If PowerShell was not started with admin privileges a popup will be shown to allow the creation of the CSR:

The generated CSR is shown in the GUI window and saved to the specified file. You can use the CSR to request a certificate from a certificate provider of your choice. The certificate key is stored safely within the certificate store on your PC under Certificate Enrollment Requests:

When you receive the certificate in a .cer or .crt file from your certificate provider you can install it. After installation the new certificate (including the key) can be found in the Computer Certificate Store under Personal/Certificates.

Dependencies

This script uses CertReq.exe which exists by default on any (recent) Windows machine.

generate-csr's Issues

Button title

Quote from readme.md:
After supplying the information hit "Generate CSR". You will be asked to provide a name and location for the generated CSR file:

Button has 'Create CSR' label instead of 'Generate CSR'

Whitespace bug

Hello Wouter,

the whitespace bug still exists. I downloaded the latest version, but there are same whitespaces like before.

Can u fix this?

Kind regards

IPV6 address doesn't work as a SAN

IPV4 works correctly in SAN
IPV6 is added as DNS name