Generate Hybrid BULK PKCS #10 Certificate Signing Requests (CSRs)
This tool generates a bulk ZIP file of up to 100 private and public key pairs (primary and alternate) along with certificate signing requests (CSRs). The private keys are in PKCS#8 format and DER encoded. The CSRs are in PKCS #10 format and DER encoded. Alternate public key and signature data are added as attributes in the CSR. If ML-KEM is selected for the alternate key, the public key is added as an extension request in the CSR. The private keys and associated CSRs are stored in their respective folders in the ZIP file. Warning: these private keys and CSRs should ONLY be used for test and development purposes.
Requirements/Restrictions:
Common Names
All generated CSRs require a unique Common Name RDN. The common names will be supplied by a
CSV file. The first column in the CSV file is reserved for the common name. Do not add column headers.
The number of CSRs generated will be determined by how many common names are in the first column.
Subject Alternative Name - DNS Names
This bulk generation supports unique Subject Alternative Name - DNS Names in the Extensions Requests as well. Though not required,
the DNS names can be added to the CSV file that contains the common names. The second column of the CSV file is reserved for
the DNS name. If any kind of value is present the Subject Alternative Name - DNS Name will be set in the Extension Requests for
that CSR only. Like wise, if the value is empty the extension will be omitted during CSR generation. The third column is reserved
for the DNS Names critical status. To represent critical place a '1', non-critical place a '0' (or leave it empty). The third column
will not be checked unless a DNS Name is provided for that row.
Do not add more information past the specified columns, it will not be checked and could impact valid processing.
CSV Example:
1
2
