What’s a Certificate Signing Request
- A CSR is an encoded file that provides you with a standardized way to send DigiCert your public key as well as some information that identifies your company and domain name.
- When you generate a CSR, most server software asks for the following information: common name (e.g., www.example.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048-bit minimum).
Before you can order or renew an SSL/TLS certificate , it is recommended that you generate a Certificate Signing Request (CSR) from your server or device as follows.
How to generate a CSR
- Login to the machine where a CSR is needed.
- Start Internet Services Manager.
- Click Server Name.
- From the center menu double-click Server Certificates in the Security section.
- Select the Actions menu from the right. Click Create Certificate Request.
- The Request Certificate Wizard will appear. In the Distinguished Name Properties window enter information as prompted. Click Next.
- In the Cryptographic Service Provider Properties window leave both settings at their defaults (Microsoft RSA SChannel Cryptographic Provider and 2048). Click Next.
- Enter a file name and location to save your CSR to.
- Your CSR will now be saved to the location you selected in the file you named. Now you will need this CSR to enroll for your SSL Certificate.
- Once you got back the Cert from the Cert Authority, we will need to convert it to PFX. Follow this article on converting a cert to PFX -How to convert a cert to PFX