How to create CSR (Certificate Signing Request) with OpenSSL

Here is How to create a CSR (Certificate Signing Request) with OpenSSL.

Check "How to verify a certificate thru OCSP responder with Free tool OpenSSL" to see how to install OpenSSL.

You need a minimum requirement in order for creating CSR (Certificate Signing Request)

1. Common name;

2. Organization;

3. Department

4. City

5. State

6. Country

7. Key Size; 2048(recommended) or 4096. 

 

 

Example

 

1. Common name; CSR_OpenSSL.ipbalance.com

2. Organization; WireTHINK

3. Department; Information Security and assurance

4. City; Happytown

5. State; CT

6. Country; us

7. Key Size; 2048(recommended) or 4096. 

 
OpenSSL commands
 
openssl req -new -newkey rsa:2048 -nodes -out CSR_OpenSSL_ipbalance_com.csr -keyout CSR_OpenSSL_ipbalance_com.key -subj "/C=us/ST=CT/L=Happytown/O=WireTHINK/OU=Information Security and assurance/CN=CSR_OpenSSL.ipbalance.com"
 
 
Once you execute above command on OpenSSL prompt, you will get two files(below)
 
 
CSR_OpenSSL_ipbalance_com.csr
CSR_OpenSSL_ipbalance_com.key
 
 
Opening "CSR_OpenSSL_ipbalance_com.csr"
 
—–BEGIN CERTIFICATE REQUEST—–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—–END CERTIFICATE REQUEST—–

 
 
 * Warning; make sure it is validated tool for certain organization such as DoD… CSR that is created by invalid tool might provide improper certificates.
 
 

 

Leave a Reply