Generate a private key and CSR right in your browser — no account, no email, and the private key never leaves your device.
Submit the CSR (not the key) to your certificate authority. Keep the private key — you'll need it to install the certificate once it's issued, and it should never be shared with the CA or anyone else.