How do I generate a CSR on Apache?

Before issuing an SSL certificate, you need to generate a CSR (Certificate Signing Request).

Step 1: Connect to your server

Connect to your Apache server via SSH and navigate to the directory where you want to create the CSR.

Step 2: Generate the CSR

Run the following command:

openssl req -out CSR.csr -new -newkey rsa:4096 -nodes -keyout privatekey.key

This command will generate:

• The CSR file (CSR.csr)
• The Private Key (privatekey.key)

Important: Keep the privatekey.key file in a safe location. It will be required when installing your SSL certificate.

Step 3: Complete the certificate details

Enter the following information using Latin characters as in the example:

Field	Example
Country Name	GR
State or Province	Attiki
Locality	Kifisia
Organization	Enartia
Organizational Unit	Support (optional)
Common Name	www.example.com
Email Address	admin@example.com

Important Notes

• The Email Address field is required.
• Leave the Challenge Password field blank.
• For a Wildcard SSL certificate, use *.example.com as the Common Name.

Step 4: Copy the CSR

Open the following file: CSR.csr

and copy its entire contents, including:

-----BEGIN CERTIFICATE REQUEST-----

and

-----END CERTIFICATE REQUEST-----

You will need this CSR when ordering or reissuing your SSL certificate.

Helpful Tip: If you lose the privatekey.key file, you will need to generate a new CSR and request a reissue of your SSL certificate.