If you are purchasing your own security certificate, you will be asked to provide a Certificate Signing Request (CSR). To generate a CSR:
- Open an SSH session to your account.
- Enter
openssl genrsa -out domain.key 2048
, wheredomain
is your domain, and press Enter. A new file,domain.key
, is created. - Enter
openssl req -new -key domain.key -out domain.csr
and press Enter. Several prompts for details about the certificate will appear. __When prompted for a Common Name, be sure to correctly enter the domain (or subdomain) for use with the __. When openssl is finished, the CSR file, domain.csr, is created. more domain.csr
and press Enter. The contents of your CSR file will appear in the console.- Copy and paste the contents of your CSR file to your certificate provider’s form.