Since creating TLS certificates involves also creating a private key, wouldn't you want to do this on your own hardware and not trust a third-party with your key?
That depends on the intended application of those certificates. I was only thinking of local development with self-signed certificates that would never be used in production. But yes, I see your point. Some users may not realize the security risk when using an online tool like this and use it for production certificates as well.
