General CSR Creation Guidelines

Before you can order an SSL Certificate, you must first generate a CSR (Certificate Signing Request) for your server.

A CSR is an encoded file that provides you with a standardized way to send us your public key along with some information that identifies your company and domain name. When you generate a CSR, most server software asks for the following information: common name (i.e. www.example.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048 bit minimum).

When you generate the CSR, if you aren't sure of the exact company name or location, don't worry; we can correct that information during our review process before we issue your certificate.

Common Platforms & Operating Systems

Microsoft Internet
Information Services

CSR Generator: Instructions:

Learn more about SSL Certificates for IIS »

Microsoft Exchange Server

CSR Generators: Instructions:

Learn more about SSL Certificates for Exchange »

Apache Server (OpenSSL)

CSR Generator: Instructions:

Learn more about SSL Certificates for Apache »

Tomcat Server (Keytool)

CSR Generator: Instructions:

Learn more about SSL Certificates for Tomcat »

Microsoft Office Communications Server 2007

CSR Generators: Instructions:

NOTE: To remain secure, certificates must use keys which are at least 2048 bits in length. If your server platform can't generate a CSR
with a 2048-bit key, please contact us. See this article for more information.

All CSR Creation Instructions by Platform/OS

The Country is a two-digit code - For the United States, it's US. For countries outside of the United States, see this list of
SSL Certificate Country Codes.

State and Locality are the full names, e.g. California or Los Angeles.

The Organization name is your full legal company or personal name, as legally registered in your locality.

The Organizational Unit is whichever branch of your company is ordering the certificate, such as accounting, marketing, etc.

The Common Name is the Fully Qualified Domain Name (FQDN) for which you are requesting the SSL Certificate.

NOTE: If you are generating a CSR for a Wildcard SSL Certificate your common name must start with an * (for example, *.digicert.com). The wildcard
character (*) will be able to assume any name that does not have a dot character in it.

Once your CSR is created, you will simply copy and paste it into the online order form when purchasing your SSL Certificate.

Get The Support You Need, When You Need It

DigiCert has an award-winning in-house technical support team that is here to help you with any digital certificate issues that you have. Our dedication to unparalleled customer support is reflected in the numerous service awards we have won. Nowhere is this better demonstrated than in the hundreds of 5-star customer reviews we have on SSLShopper.com. In fact, DigiCert is the only Certificate Authority with a perfect 5-star rating!


Professional Support Available Anytime!

We try to keep our online documentation as up-to-date as possible. However, if you have a particular article or platform that you would like to see documentation for, please email us.

Support Toll Free: 1-800-896-7973 (US & Canada)
Support Direct: 1-801-701-9600
Fax Toll Free: 1-866-842-0223 (US & Canada)
Email: support@digicert.com