Generating a Certificate Signing Request (CSR) for a Single Domain

To generate a certificate signing request (CSR), you need to have openssl package installed. Please refer here for the instruction on how to install it.

Once you have openssl installed, please use below command to create a CSR with key for mydomain.com. 

$ openssl req -new -newkey rsa:2048 -nodes -keyout mydomain.com.key -out mydomain.com.csr

Press Enter and you will need to provide a few information regarding the CSR. The information are as follows:

1. Common Name: The FQDN (fully-qualified domain name) you want to secure with the certificate. For example: mydomain.com
2. Organization: The full legal name of your organization including the corporate identifier. For example: MyCompany Co
3. Organization Unit (OU): Your department such as 'Information Technology' or ‘Website Security.’
4. City or Locality: The locality or city where your organization is legally incorporated. Do not abbreviate. For example: Cyberjaya
5. State or Province: The state or province where your organization is legally incorporated. For example: Selangor
6. Country: The official two-letter country code where your organization is legally incorporated. For example: MY

Once the CSR has been generated, we can provide it to the SSL provider, so that they can use it to provide the SSL for your domain. Please be mindful to keep the key file, because we will need it during our SSL setup.