Chat With Us
We are here for you!
Talk to a fellow human.
A Certificate Signing Request (CSR) is an encrypted message used by an applicant to request an SSL certificate from a Certificate Authority (CA). An SSL certificate cryptographically binds an entity's Public Key to identity information about that entity. A CSR, therefore, contains the identity information that will be included in your certificate (like your domain, company name, address and country) along with your public key. Before issuing your certificate, a certificate authority will validate the identity information in the CSR to ensure it is accurate.
CSRs are generated using webserver software such as IIS, Apache and Nginx and must be created on the server which the certificate is to be used. To create a CSR, you will typically follow a wizard on your web server software which will ask you to enter domain and identity details such as organization name and address. Once generated, a typical CSR looks like this:
-----BEGIN CERTIFICATE REQUEST-----
MIIBzTCCATYCAQAwgYwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh MREwDwYDVQQHEwhMYWtld29vZDEQMA4GA1UEChMHVVdILkJJWjELMAkGA1UECxMC SVQxGDAWBgNVBAMTD3d3dy5jY3BheWNjLmNvbTEcMBoGCSqGSIb3DQEJARYNYWRt Gki5197E6+oY1LR4QIC/haahLVm122UCAwEAAaAAMA0GCSqGSIb3DQEBBAUAA4GB AHx2iyMXvaLDqP8OHVUdgTITkBsodaHHCvwM/4cld8fACcVr1L5UluaDGWDRqfYW Aol3wAPjxL2w5yvDlRjXzXLcAvDq+V2pV+2dLpDQoakiL2dAWpWxkgmrnS/xuf03 CPqhjZXPEPJjzPhgQ7OIbIVZgjtwOG/iBEkcIb3YJj7/
-----END CERTIFICATE REQUEST-----
Sectigo has a full range of help documentation which explain how to generate a CSR on popular webserver software. Please make sure to select 2048 bit key size when generating your CSR.
Sectigo also offers a Certificate Management platform for Apache and IIS which helps you quickly generate a CSR then automatically install your certificate.
When generating a CSR on your webserver, you will typically be asked to complete a short form containing the following fields:
|Common Name (CN)||The Fully Qualified Domain Name of the website you want to secure. For wildcards, add an asterisk (*.) before the domain name.||Single Domain: CN = www.domain.com Wildcard : CN = *.domain.com|
|Organization (O)||The legally registered name of your company, including suffixes. The 'Organization' must be the legal registrant of the domain listed in the CN field.||Acme Lug Nuts Inc.Smith Shoelaces Ltd.Ace Cloud Services Pvt|
|Organization Unit (OU)||Usually a department within the company named in the O field.||Accounts Dept.Human ResourcesIT Services|
|Town / City||Name of the city in which your business is located. Please don't use abbreviations.||SeattleBirminghamStrasbourg Sydney|
|Province, Region, County or State||Region in which your business is located. Please don't use abbreviations.||WashingtonWest MidlandsAlsaceNew South Wales|
|Country Code||Two digit ISO country code for the country in which your business is registered.||USUKFRAU|
|Email Address||An email address that can be used to contact the organization. This is usually the certificate firstname.lastname@example.org|
You need to submit it to Sectigo as part of the certificate application process. For Instant SSL certificates, the CSR is submitted after purchasing.
To submit your CSR: