Generating new identity certificate from a third-party CA

Last Updated : Sep 24, 2018 |
Prolog information
Metadata
Keywords:
The certificate Signing Request (CSR) file is created separately on either a Windows or Linux system.
  1. To generate the CSR file, enter the following OpenSSL command line tool:
    ADDITIONAL INFORMATION:
    openssl req -out <csr-file.csr> -new -newkey rsa:2048 -nodes keyout <my-private-key-file.pem> 
    Note:
    The openssl command doesn't prompt for the SAN fields.
  2. Send the CSR to the third-party CA for signing.
    ADDITIONAL INFORMATION:
    Note:
    Some third-party vendors allow uploading of CSR files and will also prompt for additional SAN fields.
  3. The third-party vendor will return the signed certificate.