How to generate CSR and PKCS12 Azure certs have to follow requirements published here Generate private key openssl genrsa -out key/domain.tld.key 4096 Generate CSR Prepare CNF file as follows: