CSR generation-create certificate signing request
Generate CSR (Certificate Signing Request) for SSL certificates. Submit to CA for certificate approval.
On this page
A CSR (Certificate Signing Request) is a file you send to a Certificate Authority (CA) to request an SSL certificate. It contains your public key and domain information.
Generate CSR
Via OpenSSL (VPS)
openssl req -new -newkey rsa:2048 -nodes -keyout private.key -out certificate.csr
You'll be prompted for:
- Country Code (US)
- State (e.g., California)
- City
- Organization name
- Common Name (CN) = your domain (yourdomain.com or *.yourdomain.com for wildcard)
Via Control Panel (cPanel/DirectAdmin)
- Log in to control panel
- Go to SSL/TLS Manager
- Click "Generate CSR"
- Enter domain and company details
- Copy CSR text
Submit to CA
- Copy entire CSR (including -----BEGIN and END lines)
- Paste into CA's order form
- Complete domain verification (email, DNS, or file)
- CA will email signed certificate
Install certificate
After CA approves:
- Download certificate files (usually .crt and .ca-bundle)
- Paste into control panel's install section
- Or install via SSH with web server config
Your private.key file is secret. Never share it or paste in untrusted places. Store securely.
Related: SSL errors | Wildcard certs
Need security-focused hosting?
UnderHost services include DDoS-aware infrastructure, SSL support, account isolation, backups, and security guidance.





















