OpenSSL CSR Creation for Apache SSL

If you already have your SSL Certificate and just need to install it, see
Apache SSL Certificate Installation, EV SSL Certificate Installation :: Apache, or Ubuntu Server with Apache2 SSL Certificate Installation.

For other OS/Platform instructions, see SSL Certificate Installation Instructions & Tutorials.

How to generate a CSR for Apache using OpenSSL

Recommended: Save yourself some time by using our new OpenSSL CSR Wizard to create your apache ssl csr. Just fill in the details, click Generate, and paste your customized openssl command into your terminal. 

If you will be using Apache for Mac OS X server 10.5, see our Mac OS X CSR instructions. 

Of course if you prefer to build your own shell commands to generate your apache csr, just follow our old instructions below:

1. Login to your server via your terminal client (ssh). At the prompt, type:
   
   openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
   where server is the name of your server.
   
   
2. This begins the process of generating two files: the Private-Key file for the decryption of your SSL Certificate, and a certificate signing request (CSR) file (used to apply for your SSL Certificate) with apache openssl.
   When you are prompted for the Common Name (domain name), enter the fully qualified domain name for the site you are securing. If you are generating an Apache CSR for a Wildcard SSL Certificate your common name should start with an asterisk (such as *.example.com).
   You will then be prompted for your organizational information, beginning with geographic information. There may be default information set already.
   This will then create your openssl .csr file.
   
   
3. Open the CSR file with a text editor and copy and paste it (including the BEGIN and END tags) into the DigiCert Certificate order form.
   
   
4. Save (backup) the generated .key file as it will be required later for Certificate installation.
   
   
5. After you receive your SSL Certificate from DigiCert, you can install it.