How to Generate CSR (Certificate Signing Request) | MVMCloud

How to Generate CSR (Certificate Signing Request)

On Windows, Linux and Online

Avatar
Author: José Fernando
Friday, August 19, 2022

In this article you will learn how to generate a CSR (Certificate Signing Request) in Windows, Linux and Online environments. To get an SSL certificate, you need to generate a CSR, which stands for a certificate signing request.

When you purchase an SSL certificate you will need to provide the necessary information so that the Certificate Authority can generate it and send it to you. Read on to learn what the CSR is, what information it contains, and how to create it on the system you use.


What you will see in this article


SSL Certificate

Web pages not served over HTTPS are now showing as "not secure" in Google Chrome and Mozilla Firefox. To avoid this, and to give the visitor peace of mind, having an SSL certificate installed allows, in addition to strong protection, that this warning is not shown and that it is safe to browse your site.

What is it?

SSL certificates ensure the encryption of data on the Internet and allow it to be transmitted securely from a web server to a browser. With SSL, your website can use the https protocol and will display a padlock on your website visitors' browsers to indicate that the connection is secure.

SSL

What are the types of certificate?

There are three different levels of verification that SSL certificates are based on. Domain Validation (DV), Organization Validation (OV) and Extended Validation (EV). The main difference between the types of certificate is related to the information that the Certificate Authority, RapidSSL, GeoTrust and Comodo, require and validate to issue a certificate. Higher certificate levels require more information and are usually displayed in the browser bar. The EV, for example, turns the browser bar green and displays the organization name to visitors to generate more trust.

Why should you have one installed on your website?

SSL certificates are an essential part of the Internet. Not only do they encrypt communication between your computer and the server where a website is located, but they also provide verification that a website is what it claims to be.

Your website provides security for visitors to provide important information, such as name, address, credit card number, etc. to purchase a product or service.


What is CSR (Certificate Signing Request)?

When you want to get your own SSL or TLS certificate, one of the first things you need to do is create a certificate signing request or CSR. The Certificate Signing Request (CSR) is information that the Certificate Authority (CA) will use to create your certificate. This information includes the common name, company name, and country. It also includes the public key that will be included in your certificate and is signed with the corresponding private key. This public key will also be included in your certificate.

What information does it contain?

The Certificate Authority will use the CSR data to build your SSL Certificate. Key information includes the following:

  • Common name: The fully qualified domain name, or URL, that you are securing. If you are requesting a Wildcard Certificate, add an asterisk (*) to the left of the common name where you want the wildcard, for example *.yourcompany.com.
  • Company: The legal name of your company. If you are applying as an individual, enter the name of the certificate applicant.
  • Company's Unit: You can enter the trade name of the company, or a department name.
  • City or locality: Name of the city where your company is registered/located. Use the full name.
  • State: Name of the state in which your company is registered/located. Use the full name, without abbreviations.
  • Country: The two-letter country code in International Organization for Standardization (ISO) format where your business is registered.

Use our online CSR generator

Generating the CSR involves a manual step that can sometimes be a bit complicated. In this article, you will see how to perform each step in Windows and Linux environments, but if you want to save time and make your life easier, you can use our online CSR generator. Provide the necessary information and MVMCloud generates the CSR and sends it to your email.

How to generate the CSR on my computer?

The generation of the CSR will be determined by the system you are using. On this page you will find detailed instructions for doing this on Windows, Linux and Online systems (see above):

Generate it on Linux

On Linux you will use OpenSSL to generate the CSR. If you haven't installed it yet use the following command depending on your Linux type:

  • On Debian-based systems such as Ubuntu, type in the terminal command line:
    sudo apt install openssl
  • On RedHat-based systems such as CentOS, type in the terminal command line:
    sudo yum install openssl
  • To check the OpenSSL version, type in the terminal command line:
    openssl version

Now that OpenSSL is installed it's time to generate the CSR. Open the terminal again (Ctrl+Alt+T) and type the following command:

sudo openssl req -new -newkey rsa:2048 -nodes -keyout test.com.key -out test.com.csr

The command above will ask for the information we saw earlier, plus three additional ones, a contact email and, optionally, a password for the certificate file and the company name..

The complete output of the command you can see below:

Resultado OpenSSL

It creates two files in the folder/directory where the command was executed, the names of the files will depend on what you entered in the parameters -keyout and -out

For this example the files will be:

  • test.com.key: This is the private key generated by the command;
  • test.com.csr: This is the CSR that will be sent to the Certification Authority and contains the information provided above.

Meaning of each parameter:

  • -new: Indicates a new request;
  • -newkey rsa:2048: Creates a 2048-bit RSA key;
  • -nodes: Tells not to encrypt the key;
  • -keyout: Private key file name;
  • -out: File name with request information.

See the meaning of each parameter used to generate the CSR

  • Country Name: The two-letter country code where your business is located. In the example BR (Brazil) was informed;
  • State: Full name of the state where your company is located, do not use abbreviations. In the example, São Paulo was informed;
  • Locality Name: Full name of the city where your company is located, do not use abbreviations. In the example, São Paulo was informed;
  • Organization Name: Corporate name of your company. In the example it was informed MVMCloud;
  • Organization Unit Name: Company department name or Trade Name. In the example it was informed MVMCloud;
  • Common Name: This is the name of the subdomain you want to secure. In the example it was informed www.mvmcloud.net;
  • Email Address: This email will be used for you to receive communications from the Certification Authority. In the example it was [email protected];

Important: You must replace the information in the example with your own data so that the certificate is created with your information.

After generation, the created files must be sent to the Certificate Authority. See how to do this in What to do after generating the CSR.

Generate it on Windows

Let's use IIS 10 to show you how you can generate CSR on Windows. This procedure has been tested on IIS version 10 and 11, but will also work on versions 7.x, 8.x.

  • Start IIS Manager

    A quick way to do this is to open the command panel and type inetmgr, as below:

    Iniciar Gerenciador do IIS
  • Select the Server

    Select the server in the connections panel on the left side:

    Painel de Conexões do IIS
  • Locate the Server Certificates Icon

    Double click on the icon:

    Ícone do Certificado do Servidor do IIS
  • Click “Create Certificate Request”

    This option is on the right side panel:

    Criar Certificado do Servidor do IIS<
  • Enter Certificate Information

    You must modify the example below to inform your data:

    Dados para o Certificado do Servidor do IIS

    See the meaning of each parameter used to generate the CSR

    • Country Name: The two-letter country code where your business is located. In the example BR de Brasil was informed;
    • State: Full name of the state where your company is located, do not use abbreviations. In the example, São Paulo was informed;
    • Locality Name: Full name of the city where your company is located, do not use abbreviations. In the example, São Paulo was informed;
    • Organization Name: Corporate name of your company. In the example it was informed MVMCloud;
    • Organization Unit Name: Company department name or Trade Name. In the example it was informed MVMCloud;
    • Common Name: This is the name of the subdomain you want to secure. In the example it was informed www.mvmcloud.net;
    • Email Address: This email will be used for you to receive communications from the Certification Authority. In the example it was [email protected];

    Important: You must replace the information in the example with your own data so that the certificate is created with your information.

  • Choose Cryptographic Service Provider

    Select Microsoft RSA SChannel Cryptographic Provider as the cryptographic service provider and 2048 as the bit size (unless you need to set them to other values). When finished, click the Next button.

    Serviços Criptográficos do Servidor do IIS
  • Enter the CSR filename to finish

    Create a filename for your CSR and click the Finish button.

    Finalizar CSR do Servidor do IIS

After generation, the created file must be sent to the Certificate Authority. See how to do this in What to do after generating the CSR.

CSR looks like

The CSR file is nothing more than a text file in a special format that is used by the Certificate Authority to issue the SSL Certificate. If you open it in Notepad you will see content similar to this:


-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----

What to do after generating the CSR?

Usually, hosting companies or SSL certificate reseller companies provide a control panel in the client area for sending. When you purchase an SSL certificate with MVMCloud, you will receive an email with instructions for submitting the CSR. You just follow the steps below:

  1. Access Client Area;
  2. In the main panel of the Client Area, select the SSL Certificate you want to configure
    Client Area Login
  3. In the Manage Products panel click Configure Now
    Configure SSL
  4. In the Configure SSL Certificate panel, select the type of web server that will be used to install the certificate, if you cannot find yours, choose Other (not listed). Copy and paste the contents of the CSR file in the red area
    Inform CSR
  5. Scroll down and fill in the contact information. They will not appear on the certificate, but they will be important for the Certificate Authority to contact you, and also for you to receive the certificate after issuance.
    Contact Information

    After filling in the information, click on the Continue button.

  6. The Validation Method can be used by the Certificate Authority to validate domain ownership, in other words, ensure that you own the domain for which the SSL certificate will be issued. Validation can be done by E-mail, HTTP or DNS, in this example e-mail validation is being used. You must choose which email will receive the instructions for validation. Click on the Continue button after choosing the email.
    Validation Method
  7. Okay, sending the CSR to the Certificate Authority is complete. You must now wait for the email with the instructions to validate the domain ownership, after which the certificate will be issued and sent to the email you provided.
    Completion of CSR submission

Conclusion

Purchasing an SSL certificate involves submitting information via the CSR (Certificate Signing Request) to the Certificate Authority. We have just seen in this article how you can generate the file in your environment and how MVMCloud automates this process for you if you purchased the certificate from us.

Sometimes generating the CSR can be a complicated task. With this in mind, we created an online tool that simplifies this entire process, it replaces all manual steps and sends the CSR directly to your email. To see how to use it go to Use our online CSR generator.

Thank you for reading this article to the end and I hope it was helpful. If you need an SSL certificate, see how to buy it from us.

0.0 média de 0 avaliações.

Leave your review

Logo

MVMCloud specializes in High Speed Cloud Website Hosting, offering Website Hosting services, WordPress Hosting, VPS Servers, and many other services to get you started on your Internet journey.

Latest Posts




Contact Us

If you have any question or sugestion, please contact us:

Contact us


FraudLabs Pro Prevents Fraud for Digital Businesses