Home Security Security General How to create CSR (Certificate Signing Request) with OpenSSL

Here is How to create a CSR (Certificate Signing Request) with OpenSSL.

Check "How to verify a certificate thru OCSP responder with Free tool OpenSSL" to see how to install OpenSSL.

You need a minimum requirement in order for creating CSR (Certificate Signing Request)

1. Common name;

2. Organization;

3. Department

4. City

5. State

6. Country

7. Key Size; 2048(recommended) or 4096. 

 

 

Example

 

1. Common name; CSR_OpenSSL.ipbalance.com

2. Organization; WireTHINK

3. Department; Information Security and assurance

4. City; Happytown

5. State; CT

6. Country; us

7. Key Size; 2048(recommended) or 4096. 

 
OpenSSL commands
 
openssl req -new -newkey rsa:2048 -nodes -out CSR_OpenSSL_ipbalance_com.csr -keyout CSR_OpenSSL_ipbalance_com.key -subj "/C=us/ST=CT/L=Happytown/O=WireTHINK/OU=Information Security and assurance/CN=CSR_OpenSSL.ipbalance.com"
 
 
Once you execute above command on OpenSSL prompt, you will get two files(below)
 
 
CSR_OpenSSL_ipbalance_com.csr
CSR_OpenSSL_ipbalance_com.key
 
 
Opening "CSR_OpenSSL_ipbalance_com.csr"
 
-----BEGIN CERTIFICATE REQUEST-----
MIIC2TCCAcECAQAwgZMxCzAJBgNVBAYTAnVzMQswCQYDVQQIDAJDVDESMBAGA1UE
BwwJSGFwcHl0b3duMRIwEAYDVQQKDAlXaXJlVEhJTksxKzApBgNVBAsMIkluZm9y
bWF0aW9uIFNlY3VyaXR5IGFuZCBhc3N1cmFuY2UxIjAgBgNVBAMMGUNTUl9PcGVu
U1NMLmlwYmFsYW5jZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDk99lUlYSu8GRFBYjoh8XdtS91rkj2B/qHHxIcz/Bv8fdnSJRPbwFH3WflCFsS
25OW8e9YH6+CokpjeNMCjHvIOPsYMvCpVr7G1MnrTh5277JanzS4TXpyySJbdkWR
uO0VwchYcvGxBeY0szYsgHN2M6uyhj9V4l85aWLKJE/vVdjCHef6WW2NF6A2J7CZ
jyRGejJG3G2Xb0OWSQ6b/RJJJDhHmxt6ukWRecnJEKVZxLQWCNcR/+tDmLBgWnYp
XHc3kFVmDvYX3uSIeeHPh1vgdLcGpP0KlrRPSvnzER0enbfHEGJETvxVxI4g0VPC
BsDDdcz5y+yXRE3QlIAT4os5AgMBAAGgADANBgkqhkiG9w0BAQUFAAOCAQEAu8vn
Q0RBrFTv2f3uRrdcnCs/xnnEXUYdK/PUXDlK+nbbJY9SdgXWNfAp4L+OjBeLlpxG
crxHYfsbn4y/t4vjggn7WiVeV5hRFGJKgWXvrI60msnA+PUoHkhvpekM2ouJagGg
lAinnp8JyjC0RpEfgwMcNR5kQr0jiWulEbQhv5WTnOt0H3GH+WjCG8gEkrCApc8L
pTm/4derLk6YeTuGcAc/8Zp5D3x7zxNCa8WYeFXjGt6azqQmBwAkPgT04NSuyWMm
VGkQ1usEPz+rkCSGHSibJ3zXgnwR2gbjZiAfW/8zqKi6EVEVGNMOnnlhBAmyhaYP
2kjFbfNmMk7gViZ+iA==
-----END CERTIFICATE REQUEST-----
 
 
 * Warning; make sure it is validated tool for certain organization such as DoD... CSR that is created by invalid tool might provide improper certificates.
 
 

 

Last Updated (Thursday, 09 June 2011 08:19)

 
User Menu
Statistics
Content View Hits : 351161
Community donors
Polls
Highly recommended firewall vendor?
 
Google Translation
English Arabic Chinese (Simplified) Czech Dutch French German Italian Korean Portuguese Russian Spanish Filipino Vietnamese Thai Turkish
BGP routing issue?
Banner
World Route Servers
Banner
Who's Online
We have 33 guests online