Creating a Certificate Signing Request

Last Updated : Nov 23, 2018 |
Prolog information
The Certificate Signing Request (CSR) file is created separately on either a Windows or Linux system.
  1. To generate the CSR file, enter the following OpenSSL command line tool:
    ADDITIONAL INFORMATION:
    openssl req -out <csr-file.csr> -new -newkey rsa:2048 -nodes keyout <my-private-key-file.pem>
The following is a sample session:$ openssl req -out csrFile.csr -new -newkey rsa:2048 -nodes -keyout myPrivateKey.pem Generating a 2048 bit RSA private key
....+++
...................+++
writing new private key to 'myPrivateKey.pem'
-----
You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:CA
State or Province Name (full name) [Berkshire]:Ontario
Locality Name (eg, city) [Newbury]:Belleville
Organization Name (eg, company) [My Company Ltd]:Avaya
Organizational Unit Name (eg, section) []:Avaya
Common Name (eg, your name or your server's hostname) []:fqdn.ca.avaya.com
Email Address []:


Please enter the following 'extra' attributesto be sent with your certificate request
A challenge password []:
An optional company name []:Avaya 
You should now see a CSR and private key file in your test directory:
$ ls -l
total 6
-rw-r--r-- 1 user group 1045 Apr 20 11:35 csrFile.csr
-rw-r--r-- 1 user group 1679 Apr 20 11:35 myPrivateKey.pem