Private key generation openssl ecparam -out my.key -name secp384r1 -genkey Generate CSR openssl req -new -key my.key -out my.csr -sha256 Get existing CSR info openssl req -in my.csr -text -noout