A standard that puts a source sticker on photos and video

Generate a certificate signing request (CSR)

Before you apply, create an ES256 key and CSR locally. Paste only the CSR — never upload your private key.

Generate in this browser (recommended)

Creates an ES256 CSR with O= matching your organization from step 2. One click fills the CSR field below.

Private key is kept in memory on this page only. Download and store it securely before you leave.

OpenSSL (advanced)
openssl ecparam -name prime256v1 -genkey -noout -out claim-signing.key
openssl req -new -sha256 -key claim-signing.key -out claim-signing.csr -subj "/O=Your Org/CN=claim-signing"

Replace Your Org with the exact name from apply step 2. The CSR must use ES256 (prime256v1).

A CSR is a public envelope that describes your organization (O=) and the key you will use to sign C2PA manifests. XenLook RA matches it to your application.

Use the browser generator below or OpenSSL. Keep claim-signing.key offline — we never ask for it on apply.

Apply →