Create a CSR (SSL Certificate Signing Request)
General CSR Creation Guidelines
Before you can order your SSL Certificates, you must first generate a CSR (Certificate Signing Request) on your server. A CSR is an encrypted body of text. Your CSR will contain encoded information specific to your company and domain name; this information is known as a Distinguished Name or DN.
In the DN for most servers are the following fields: Country, State (or Province), Locality (or City), Organization, Organizational Unit, and Common Name. Please note:
- The Country is a two-digit code -- for the United States, it's 'US'. For countries outside of the United States, see our listing of SSL Certificate Country Codes.
- State and Locality are full names, i.e. 'California', 'Los Angeles'.
- The Organization Name is your Full Legal Company or Personal Name, as legally registered in your locality.
- The Organizational Unit is whichever branch of your company is ordering the certificate such as accounting, marketing, etc.
- The Common Name is the Fully Qualified Domain Name (FQDN) for which you are requesting the ssl certificate.
If you are generating a CSR for a Wildcard Certificate your common name must start with *. (for example: *.digicert.com). The wildcard character (*) will be able to assume any name that does not have a "dot" character in it.
To remain secure, certificates must use keys which are at least 2048 bits in length. If your server platform can't generate a CSR with a 2048-bit key, please contact us. See this article for more information.
Once your CSR is created, you will be able to simply copy and paste it into the online order form.
Alphabetic Platform/OS Listing »
Popular Server Platforms
Microsoft Internet Information Services
Resources:
Microsoft Exchange Server CSR Help
Resources:
Apache Server (OpenSSL Instructions)
Resources:
Tomcat Server (Keytool Instructions)
Resources:
DigiCert® CSR Support
One-on-One Support
If you have purchased a security certificate and need one-on-one help on how to create a CSR for your web server, contact our Support Team: 1-801-877-2100
If there are questions or comments about a server type or platform not listed here we can still help! Just give us a call.
Generating a CSR for Issuance of an SSL Certificate
How to generate a Certificate Signing Request (CSR) for your Web Server
-
- 2X Application Server
- 3Com Wireless LAN
- Adobe Connect
- Alpha Five
- AEP Netilla
- Apache (OpenSSL)
- Barracuda
- Cerberus FTP
- Cisco ASA
- Cisco Mobility
- Citrix Access Gateway
- Citrix Access Essentials
- Cobalt RaQ3x/4x/XTR
- Courier IMAP
- cPanel
- C2Net Stronghold
- Ensim Control Panel
- F5 BIG-IP
- F5 FirePass
- Hsphere Web Server
- IBM HTTP Server
- iPlanet
- Java (Generic) Web Servers
- Lighttpd
- Lotus Domino Go 4.6.2.6+
- Lotus Domino 4.6x & 5.0x
- Lotus Domino 8.5
- Mac OS X
- Microsoft Exchange 2007
- Microsoft Exchange 2010
- Microsoft IIS 4.x
- Microsoft IIS 5.x/6.x
- Microsoft IIS 7
- Microsoft Office Comm. Server
- Microsoft Outlook Web Access
- Nginx
- NetScreen
- Novell ConsoleOne
- Novell I-Chain
- Oracle Wallet Manager
- Plesk Server
- Qmail
- Sun Java Web Server
- SurgeMail
- Tomcat Web Servers
- Weblogic 8 & 9
- Weblogic (previous versions)
- Webmin
- Website Pro
- Websphere
- WebSTAR
- WHM
- Zeus Loadbalancer
- Zeus Webserver
- Zimbra
- Zyxel Zywall
© 2003-2012 DigiCert® Inc • SSL Certificate Authority • All Rights Reserved
All trademarks displayed on this web site are the exclusive property of the respective holders.
