Open SSL Creating Certificate Signing Request — CSR Generation

A Certificate Authority will use a CSR to create your SSL certificate.

What is a CSR? A CSR or ‘Certificate Signing Request’ is a block of encrypted text, that is generated on the server that the certificate will be used on.

It contains information that will be included in your certificate, such as your organization name, common name (domain name), locality, and country. It also contains the public key that will be included in your certificate.

Run these OpenSSL commands, to generate your Certificate Signing Request.

Step 1: Generate a Private Key

$ openssl genrsa -out 2048

If you need just to renew existence certificate and you already have the private key, you can skip this step and use it, instead of generating new one.

The number 2048 is the size of the key, in bits. Today, 2048 or higher is recommended for RSA keys, as fewer amount of bits is consider insecure or to be insecure pretty soon.

Step 2: Generate the CSR

$ openssl req -new -key -out

The fields, required in a Certificate Signing Request, are listed below with explanations and examples :

Distinguished Name FieldExplanationExample
Common Name The fully qualified domain name (FQDN) for your web server. This must be an exact match. If you intend to secure the URL, then your CSR’s common name must be:
Organisation The exact legal name of your organisation. Do not abbreviate your organisation name. ShellHacks Ltd.
Organisation Unit Section of the organisation, can be left empty if this does not apply to your case. Development department
City/Locality The city where your organisation is legally located. Balham
State/County/Region The state/county/region where your organisation is legally located. Must not be abbreviated. London
Country The two-letter ISO abbreviation for your country. GB
Email address The email address used to contact your organisation.
0 (0)
Article Rating (No Votes)
Rate this article
There are no attachments for this article.
There are no comments for this article. Be the first to post a comment.
Full Name
Email Address
Security Code Security Code
Related Articles RSS Feed
Index » Community Contributions » System encryption using LUKS and GPG encrypted keys for arch linux
Viewed 1381 times since Fri, Jul 13, 2018
Linux - How to unlock and reset user’s account
Viewed 1821 times since Fri, Jun 8, 2018
Using stunnel to Encrypt Database Connections
Viewed 1880 times since Fri, Sep 28, 2018
Logrotate Example for Custom Logs
Viewed 1683 times since Sun, Jan 12, 2020
HowTo: Retrieve Email from a POP3 Server using the Command Line
Viewed 6818 times since Mon, Feb 18, 2019
RHEL: Change system’s hostname
Viewed 2351 times since Sun, May 27, 2018
Linux / UNIX: DNS Lookup Command
Viewed 8849 times since Sun, Sep 30, 2018
Turbocharge PuTTY with 12 Powerful Add-Ons – Software for Geeks #3
Viewed 12237 times since Sun, Sep 30, 2018
Secure NTP with NTS
Viewed 7173 times since Sun, Dec 6, 2020
linux unix aix banner /etc/issue
Viewed 1164 times since Fri, Aug 3, 2018