![](\"http:\/\/cdblog.cdstealer.com\/wp-content\/uploads\/2017\/01\/openssl-logo-1024x278.png\"){kind=logo}
<\/h3>\n<\/h3>\nRun the following commands to create a directory in which to store your RSA key, substituting a directory name of your choice:<\/p>\n
mkdir ~\/domain.com.ssl\/\r\ncd ~\/domain.com.ssl\/\r\n<\/code><\/pre>\nRun the following command to generate a private key:<\/p>\n
openssl genrsa -out ~\/domain.com.ssl\/domain.com.key 2048\r\n<\/code><\/pre>\nCreate a CSR<\/h3>\n
Type the following command to create a CSR with the RSA private key (output is in PEM format):<\/p>\n
openssl req -new -sha256 -key ~\/domain.com.ssl\/domain.com.key -out ~\/domain.com.ssl\/domain.com.csr\r\n<\/code><\/pre>\nWhen prompted, enter the necessary information for creating a CSR by using the conventions shown in the following table.<\/p>\n
Note:<\/strong> The following characters cannot be used in the Organization Name<\/code> or theOrganizational Unit<\/code>: < > ~ ! @ # $ % ^ * \/ \\ ( ) ?.,&<\/p>\n\n\n\nDN field<\/th>\n Explanation<\/th>\n Example<\/th>\n<\/tr>\n<\/thead>\n \n\nCommon Name<\/td>\n The fully qualified domain name for your web server. This must be an exact match.<\/td>\n If you intend to secure the URL https:\/\/www.yourdomain.com<\/code>, then your CSR\u2019s common name must be www.yourdomain.com<\/code>. If you plan to get a wildcard certificate, make sure to prefix your domain name with an asterisk, for example: *.domain.com.<\/code><\/td>\n<\/tr>\n\nOrganization Name<\/td>\n The exact legal name of your organization. Do not abbreviate your organization name.<\/td>\n domain.com<\/td>\n<\/tr>\n \nOrganizational Unit<\/td>\n Section of the organization.<\/td>\n IT<\/td>\n<\/tr>\n \nCity or Locality<\/td>\n The city where your organization is legally located.<\/td>\n Wellesley Hills<\/td>\n<\/tr>\n \nState or Province<\/td>\n The state or province where your organization is legally located. Do not use an abbreviation.<\/td>\n Massachusetts<\/td>\n<\/tr>\n \nCountry<\/td>\n The two-letter ISO abbreviation for your country.<\/td>\n US<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\nWarning: Leave the challenge password blank (press Enter<\/strong>).<\/p>\nVerify your CSR<\/h3>\n
Run the following command to verify your CSR:<\/p>\n
openssl req -noout -text -in ~\/domain.com.ssl\/domain.com.csr\r\n<\/code><\/pre>\nSubmit your CSR<\/h3>\n
Submit the CSR that you created to a certificate authority.<\/p>\n
Trouble Shooting:
\nA really cool list of commands you can run here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Generate the RSA key Run the following commands to create a directory in which to store your RSA key, substituting a directory name of your choice: mkdir ~\/domain.com.ssl\/ cd ~\/domain.com.ssl\/ Run the following command to generate a private key: openssl genrsa -out ~\/domain.com.ssl\/domain.com.key 2048 Create a CSR Type the following command to create a CSR … Continue reading Generate SSL Certificate Request.<\/span>