Support Wissensdatenbank

Create CSR for Apache

A CSR is a file that contains your application data and the public key to your private key. Create a CSR file as follows and then copy its contents into the appropriate field in the ordering process.

To create a key pair consisting of a private key and a public certification request (CSR), type the following command:

openssl req -new -nodes -keyout filename.key -out filename.csr -newkey rsa:2048

It is recommended to choose the file name in such a way that you can assign it to the site unambiguously later. We therefore recommend the use of the domain to be certified by replacing the dots with underscores as file names, e.g. www_firestorm_ch.key or www_firestorm_ch.csr.

The command creates two files. The file with the extension .key contains the private key, so do not pass this file on to third parties. Please make a backup of your private key in any case, as there is no possibility of recovery after a loss. The private key serves as the basis for the certification requirement (CSR) and thus also as the basis for the certificate.

When creating the CSR, you will be asked for some details that will be included in the CSR in addition to the public key and make it unique. Some fields have a default value, to accept it simply press Enter. And if you want to leave the field empty, enter a dot (.).

Country Name (2 letter code) [AU]: CH

enter your country code here

State or Province Name (full name) [Some-State]: Zurich

Enter your canton here.

Locality Name (eg, city) []: Tann

Enter your city now

Organization Name (eg, company) [Internet Widgits Pty Ltd]: MyCompany

And here enter your company name / organization name / first and last name, whichever is most appropriate for you

Organizational Unit Name (eg, section) []: IT

And here you can enter a department, but this field can also be left empty

Common Name (eg, YOUR name) []: www.meinedomain.tld

Then enter the site you want to secure. The information must include a full domain name. So would you like to go to https://www.musterdomain.ch/… protect, enter www.musterdomain.ch, musterdomain.ch is not sufficient here, unless you only want to https://musterdomain.ch/… protect. Files and directories, on the other hand, are always included

Email Address []: info@meinedomain.tld

enter your e-mail address here

If necessary, you will be asked for the following ‘extra’ information

A challenge password []
:An optional company name []:

please always leave it empty.

Your CSR has now been created. Then open the file filename.csr in a text editor and copy its contents into the field provided in the ordering process.