Creating a CSR for Microsoft Servers Using the DigiCert® Certificate Utility for Windows

If you want a simple way to create a CSR that works on any Microsoft server platform, then use the DigiCert Certificate Utility for Windows. To create a CSR, follow the steps below.

Generating a CSR for Microsoft Servers Using the DigiCert® Certificate Utility for Windows

  1. On your Windows Server, download and save the DigiCert Certificate Utility for Windows executable (DigiCertUtil.exe).

  2. Run the DigiCert Certificate Utility for Windows (double-click DigiCertUtil).

  3. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock), and then click Create CSR.

    Utility Create CSR

  4. On the Create CSR page, provide the following information below and then click Generate.

    Certificate Type: Select SSL.
    Common Name: Enter the fully-qualified domain name (FQDN) (e.g., www.example.com).
    Subject Alternative Names: If you are requesting a Multi-Domain (SAN) Certificate, enter any SANs that you want to include
    (e.g., www.example.com, www.example2.com, and www.example3.net).
    Organization: Enter your company's legally registered name (e.g., YourCompany, Inc.).
    Department: (Optional) If you want, enter the name of your department within the organization or you can simply leave the box blank.
    City: Enter the city where your company is legally located.
    State: Use the drop-down list to select the state where your company is legally located.
    Note: If your company is located outside the US, you can type the applicable name in the box.
    Country: Use the drop-down list to select the country where your company is legally located.
    Key Size: In the drop-down list, select 2048 (unless you have a specific reason for using a larger bit length).
    Provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider (unless you have a specific cryptographic provider).

    Enter CSR Details

  5. On the DigiCert Certificate Utility for Windows© - Create CSR page, do one of the following and then click Close:

    Click Copy CSR. Copies the certificate contents to the clipboard. Use this option if you are ready to paste the CSR into the DigiCert order form.
    Note: Because the DigiCert Certificate Utility does not store CSRs, we recommend you paste the CSR into a text editor (such as Notepad) when using this option. If you close the CSR page and accidentally overwrite the clipboard contents without doing this, you will need to generate a new CSR.
    Click Save to File. Saves the CSR as a .txt file to the Windows Server 2012. (We recommend using this option.)

    Copy CSR

  6. Use a text editor (such as Notepad) to open the file. Then, copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and paste it into the DigiCert order form.

  7. After you receive your SSL Certificate from DigiCert, you can use the DigiCert Certificate Utility for Windows to install it.

    See SSL Certificate Importing Instructions :: DigiCert Certificate Tool.