create key and certificate request

csr_key

openssl req -utf8 -sha256 -out ${NAME}.csr -new -newkey rsa:2048 -nodes -keyout ${NAME}.key

https://www.openssl.org/docs/man1.0.2/apps/openssl-req.html

openssl req -nodes -newkey rsa:2048 -keyout example.key -out example.csr \
   -subj "/C=GB/ST=London/L=London/O=Global Security/OU=IT Department/CN=example.com" \
   -batch -utf8

   -config "file"



openssl req -text -in yourdomain.csr -noout -verify


config example:

  [ req ]
  default_bits           = 2048
  default_keyfile        = keyfile.pem
  distinguished_name     = req_distinguished_name
  attributes             = req_attributes
  prompt                 = no
  output_password        = mypass

  [ req_distinguished_name ]
  C                      = GB
  ST                     = Test State or Province
  L                      = Test Locality
  O                      = Organization Name
  OU                     = Organizational Unit Name
  CN                     = Common Name
  emailAddress           = test@email.address

  [ req_attributes ]
  challengePassword              = A challenge password