Knowledge Base

openssl req -newkey rsa:2048 -keyout private.key -out request.csr -nodes 

CSR Generation using OpenSSL command 

 > openssl req -newkey rsa:2048 -keyout  private.key -out request.csr -nodes 

    req - CSR operation 

   -newkey  - instructs the openssl to generate a new key pair ( private/public key) 

   rsa:2048  - key type : rsa, key size : 2048 

   -keyout - mentions the filename to store the private key 

   -out - mentions the filename to save the output of the command, here it is CSR. 

 -nodes - do not encrypt the private key 

 Note: Please save the 'private.key' securely and donot share it with anyone. 
For detailed instruction on how to generate CSR in mac-OS, refer the link below:
https://www.sectigo.com/knowledge-base/detail/How-to-Generate-a-Certificate-Signing-Request-CSR-for-SSL-TLS-certificates-on-macOS

After generating the CSR, follow these steps to complete the certificate setup: 

1. Log in to the Sectigo portal: https://store.sectigo.com/ 

2. Click on 'My Products and Services'. 

3. Click on 'Setup' for Order Number: 2402365831. 

4. Enter your Contact Email Address (must match the one used during the certificate request). 

5. Paste the newly generated CSR and click 'Submit'. 

6. Review the details and complete the setup. 

Step 2: Email Verification 

Once the setup is complete, you will receive a verification email at the address provided during the certificate request. 

Click the link in the email and enter the verification code to finalize the verification process. 

Step 3: Certificate Collection and PKCS12 Export 

After verification, you will receive a collection email at the same address. 

To collect the certificate: 

- Upload the 'private.key' file. 

- Obtain the certificate in PKCS12 format. 

Related Articles:  How to Generate a Certificate Signing Request (CSR) for SSL/TLS certificates on macOS?  | Sectigo® Official 

Tags: