Generate a Certificate Signing Request (CSR / PKCS#10) and RSA private key locally in your browser.
CN *Common Name
O Organization
OU Org Unit
C Country (2-letter)
ST State / Province
L Locality
Fill in at least the Common Name (your domain), pick a key size (2048 is fine for most CAs; 4096 is stronger but slower to generate). Click Generate — your browser creates the RSA keypair and the CSR locally with node-forge. Nothing is uploaded. Copy or download the CSR to submit to your CA, and the private key to your server. Keep the private key secret and never share it.