Csr.io - a better certificate signing request generator

Am I the only one missing an about page? There is no info whatsoever. For example I was wondering whether the certificate would be trusted by browsers or if it's self-signed. (Well it must be self-signed, it's too easy to sign one for facebook.com now, but not everybody knows that.) Who can I contact about bugs, feature requests, etc.?

Feature request: you might want to let Javascript generate the keypair so that people stop whining about letting someone else generate the private key. Although a valid argument, this isn't going to be used in production environments anyway.... Or is it, guys?!

Feature request: Let people set the key size. Also inform people about the key size (why 4096 is probably overkill at the moment).

Bug: You don't actually mention what the tool does. It generates some sort of certificate, but people will probably be under the impression that it will work instead of spawn another one of these: http://www.page-zone.com/SSL-warning-cpanel.jpg

An alternative would be to output an OpenSSL command using the data entered in the form that the user can run locally to generate the CSR and private keys.

This would be similar to what DigiCert's CSR generator does: https://www.digicert.com/easy-csr/openssl.htm

If you're in a position to generate a CSR, you should know that you never, EVER, let anyone else generate or even see your private key (including the commercial CA from which you're requesting a certificate). By using an online utility like this, you give the site owner an important component needed to perform man-in-the-middle attacks. Don't do it, kids.

> For example I was wondering whether the certificate would be trusted by browsers or if it's self-signed.

It's making CSRs, not certificates.

Open source?