UnderHost
Knowledgebase Docs

CSR generation-create certificate signing request

Generate CSR (Certificate Signing Request) for SSL certificates. Submit to CA for certificate approval.

On this page

A CSR (Certificate Signing Request) is a file you send to a Certificate Authority (CA) to request an SSL certificate. It contains your public key and domain information.

Generate CSR

Via OpenSSL (VPS)

openssl req -new -newkey rsa:2048 -nodes -keyout private.key -out certificate.csr

You'll be prompted for:

  • Country Code (US)
  • State (e.g., California)
  • City
  • Organization name
  • Common Name (CN) = your domain (yourdomain.com or *.yourdomain.com for wildcard)

Via Control Panel (cPanel/DirectAdmin)

  1. Log in to control panel
  2. Go to SSL/TLS Manager
  3. Click "Generate CSR"
  4. Enter domain and company details
  5. Copy CSR text

Submit to CA

  1. Copy entire CSR (including -----BEGIN and END lines)
  2. Paste into CA's order form
  3. Complete domain verification (email, DNS, or file)
  4. CA will email signed certificate

Install certificate

After CA approves:

  1. Download certificate files (usually .crt and .ca-bundle)
  2. Paste into control panel's install section
  3. Or install via SSH with web server config
Keep private key safe

Your private.key file is secret. Never share it or paste in untrusted places. Store securely.

Related: SSL errors | Wildcard certs

Was this article helpful?

Need security-focused hosting?

UnderHost services include DDoS-aware infrastructure, SSL support, account isolation, backups, and security guidance.

Related articles

Back to Security