Search our site for answers
Help Docs Security Overview SSL Certificates Guide Generating an SSL Certificate Signing Request (CSR) from Command Line

Generating an SSL Certificate Signing Request (CSR) from Command Line

Generating a CSR for your SSL order in cPanel is straightforward. For Core-Managed or Self-Managed servers, we provide Command Line instructions.
Security
2 min read

Generating a Certificate Request (CSR) for your SSL order in cPanel is a relatively simple task (if you have cPanel, you can find directions for this process in the article Generating an SSL Certificate Signing Request (CSR) in cPanel). But if you have a Core-Managed or Self-Managed server, you’ll need a different process to generate your CSR. Fortunately, we’ve got you covered with instructions on generating a CSR from the Command Line.

  1. Log in to your server’s terminal (SSH). If you need more information about using SSH, see Logging into Your Server via Secure Shell (SSH).
  2. At the prompt, type the following command:
openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

NOTE:

Replace yourdomain with the domain name you’re securing. For example, if your domain name is coolexample.com, you would type coolexample.key and coolexample.csr.
  1. Enter the requested information:
  • Common Name: The fully-qualified domain name, or URL, you’re securing.
  • If you are requesting a Wildcard certificate, add an asterisk (*) to the left of the common name where you want the wildcard, for example *.coolexample.com.
  • Organization: The legally-registered name for your business. If you are enrolling as an individual, enter the certificate requestor’s name.
  • Organization Unit: If applicable, enter the DBA (doing business as) name.
  • City or Locality: Name of the city where your organization is registered/located. Do not abbreviate.
  • State or Province: Name of the state or province where your organization is located. Do not abbreviate.
  • Country: The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered.

NOTE:

If you do not want to enter a password for this SSL, you can leave the Passphrase field blank. However, please understand there might be additional risks.
  1. Open the CSR in a text editor and copy all of the text.
  2. Paste the full CSR into the SSL order form of your choice. To order your SSL from Liquid Web, see Ordering an SSL Certificate
Was this article helpful?