Step 1 – Please login to your server through your terminal client (ssh). Then type the following command at the prompt:
openssl req –new –newkey rsa:2048 –nodes –keyout server.key –out server.csr
Please note "server.key" will be the file name of your private key. Replace "server" with what you want your file name to be.
Step 2 – This step would initiate the process of generating two different files:
- Private Key, which helps to decrypt your SSL certificate
- Certificate Signing Request (CSR), the file used to apply for an SSL certificate
When you are prompted for a Common Name please enter the fully qualified domain name (FQDN) for the site you intend to secure. If you are generating a CSR for a Wildcard SSL certificate, then your common name should start with an asterisk (such as *.domainname.com or *.testing.domain.com).