Generate CSR using OpenSSL

Info needed for Certificate Signing Request (CSR) generation

Country Name (2 letter code): 
State or Province Name:
Locality Name (eg, city):
Organization Name (eg, company):
Email Address:

Generate CSR

openssl req -new -newkey rsa:2048 -nodes -keyout DOMAIN.key -out DOMAIN.csr

Here is oneliner

openssl req -new -newkey rsa:2048 -nodes -out DOMAIN.csr -keyout DOMAIN.key -subj "/C=COUNTRY-CODE/ST=STATE/L=CITY/O=BUSINESS/OU=Retail/CN=DOMAIN/[email protected]"

For normal SSL, enter the domain without www.

For wildcard use *.domain.com

For multi-domain (SAN), enter domains separated by space. For Namecheap SAN SSL., enter the main domain only, secondary domains can be added in the Namecheap website.

Example

$ openssl req -new -newkey rsa:2048 -nodes -out webhostingneeds.com.csr -keyout webhostingneeds.com.key -subj "/C=IN/ST=Kerala/L=Kochi/O=WebHostingNeeds.com/OU=Retail/CN=webhostingneeds.com"
Generating a 2048 bit RSA private key
.+++
.....................+++
writing new private key to 'webhostingneeds.com.key'
-----
$ 

OpenSSL CSR Wizard

https://www.digicert.com/easy-csr/openssl.htm

View CSR Details

openssl req -in DOMAIN.csr -noout -text

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *