A CSR (Certificate Signing Request) is a block of data containing information that will be included in your certificate such as your organization name, common name (domain name), locality, and country. It also contains the public key that will be included in your certificate. A private key is ...

learn more… | top users | synonyms

1
vote
0answers
54 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
0
votes
0answers
133 views

Unable to sign iLO certificate signing request

Im trying to sign a csr generated from iLO with our local OpenSSL Certificate Authority, however, I receive the following error: [root@ca CA]# openssl ca -in ilo6.csr -out ilo-esx01.crt Using ...
0
votes
3answers
326 views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes ...
10
votes
1answer
291 views

Does generating a CSR through IIS 7.5 on Windows Server 2008 R2 always create a new private key?

Generating a CSR for a Windows 2008 R2 server and need to ensure that the private key used for the CSR is new. I have used OpenSSL before to create my own self-signed certs for testing and if I ...
2
votes
1answer
98 views

How Do I Create a New CSR Using the Data From a Previous CSR?

I need to get SSL certificates reissued for about 30 of my clients. I was hoping for an easy way to get the contents of their currents CSRs, pipe them in to openssl req -new ... and generate a whole ...
11
votes
2answers
623 views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
0
votes
1answer
64 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
1
vote
0answers
97 views

override specific DN fields when signing csr

When signing CSR on CA side, how can I override specific DN fields by custom value? I want to ignore what is written in CSR. For example in C= and O= fields and replace them by something static. Other ...
0
votes
2answers
640 views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
4
votes
1answer
78 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CSRs that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
1
vote
2answers
262 views

Is it possible to batch sign CSRs (with certutil for instance)?

I have about 100 CSR to sign on a windows PKI. I would like to know if it's possible to batch submit, issue and export these CSRs via batch or powershell script, maybe using cert util, and how to do ...
1
vote
1answer
116 views

When do SSL certs require a dedicated IP, and when don't they? [duplicate]

My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
2
votes
2answers
211 views

SSL certificate. Can it apply to more domains in future?

What can I do if I have completed a CSR for "domainA.com" but later want it to also apply to "domainB.com"? I'm assuming there aren't many options once the CA has issued the license, apart from ...
11
votes
2answers
2k views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate? This page on SSL Shopper says so, but I'm not sure if ...
1
vote
1answer
346 views

Windows 2003, how to create a Certificate Signing Request (CSR) without an IIS

I have a Windows 2003 that hosts a Citrix Secure Gateway service. (It is a reverse proxy that adds SSL to my otherwise unencrypted connections) It doesn't depend on IIS that indeed may also be ...
3
votes
2answers
204 views

Why do I need to create a new CSR?

My website on a shared server has a SSL certificate installed and I want to move the certificate to a dedicated server that's supplied by a different hosting company. The current hosting company says ...
1
vote
1answer
486 views

Installing crt certificate without CSR on IIS6

I renewed an ssl certificate on GoDaddy recently. It didn't ask me to generate a new CSR. It just gave me a .crt file. How do I install this in IIS6. I already removed the expired certificate and ...
1
vote
1answer
350 views

Is there a way to change the string format for an existing CSR “Country Code” field from UTF8 to Printable String?

CentOS 5.x The short version: Is there a way to change the encoding format for an existing CSR "Country Code" field from UTF8 to Printable String? The long version: I've got a CSR generated ...
2
votes
1answer
120 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
0
votes
3answers
959 views

Can I generate CSR for remoted server and what server I should use(thin,mongrel)?

I am moving my app into production and need help in generating CSR. I created a private key and followed these steps: Created private key Entered passphrase for it (openssl genrsa -des3 -out ...
-2
votes
1answer
41 views

Can csr certificate be generated in nonssl apache [closed]

I am using apache2.2 nonssl .How to generate a csr certificate in that
1
vote
1answer
66 views

SSL cert for used by a trusted 3rd party on my subdomain

I own example.com, and I'd like to get an SSL cert. Normally I would simply buy a wildcard cert, so that I can add subdomains for future purposes. However, I need to let a trusted 3rd party operate a ...
0
votes
3answers
77 views

ssl and signing request question

I need to generate an ssl csr for a wildcard certification which I can do using openssl and ssh (I don't use any web based control panels such as cPanel). Now I'll be getting a new server next week ...
7
votes
2answers
3k views

Can I reuse a SSL CSR?

I've generated a self certified SSL cert for testing a new web site. The time has come for the site to go live and I now want to purchase a cert from GeoTrust. Can I use the same CSR that I generated ...
54
votes
1answer
34k views

What is a challenge password?

I'm setting up SSL on an Ubuntu server. One of fields it asks for as part of setting up the CSR is a "challenge password". What is that? The default is blank. Do I need to enter one?
0
votes
1answer
167 views

How to explain to a client that he must generate his SSL certificate using CSR generated on hosting IIS server? [closed]

I have probably quite easy question: How to explain to a client that he must generate his SSL certificate using CSR generated on hosting IIS server? Thank you
2
votes
3answers
4k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...
1
vote
0answers
154 views

On IIS6, can I install a certificate on a website with another CSR pending?

I have a GoDaddy exteneded EV certificate that I am trying to renew. It had completely expired before I realized it was up for renewal. In a haste, I generated a CSR to issue a new certificate from ...
0
votes
1answer
121 views

generate exchange CSR , exchange 2007 UCC. SSL CERT

I want to make sure I am going this correctly. machine name: win2k8ex1. certificate: common name: owa.x.com subject alternative domains: autodiscover.x.com mail.x.com WIN2K8EX1 ...
0
votes
1answer
2k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
0
votes
1answer
206 views

Wildcard CSR generation through IIS6

What is hopefully an easy question for someone familiar with generating CSRs from IIS6: When generating the CSR, do I just select any SINGLE site in IIS that the wildcard certificate will be used for ...
2
votes
2answers
507 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
0
votes
1answer
835 views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
1
vote
1answer
849 views

SSL, CSR: should I include -----BEGIN CERTIFICATE REQUEST-----?

I need to submit my CSR certificate (generated with openSSL) to my ssl provider. I need to copy paste it in a text area. I was wondering if I should copy paste also the beginning and the end: ...
3
votes
1answer
3k views

certreq.exe unable to to submit Base64 CSR - Invalid Data

I am trying to script a solution to automatically submit Base64 CSRs to a Microsoft Certificate Services CA, but keep getting tripped up. My understanding is that all I should need to specify is a ...
0
votes
1answer
2k views

How to generate a CSR for Verisign for use with FileZilla (in Windows)

I need to get a certificate from VeriSign to use in FileZilla (FTPS, FTP over SSL), to get the certificate, Verisign asks for a CSR file, FileZilla doesn't seem to have a way to generate those CSR ...
2
votes
3answers
681 views

CSR, SSL and load balancers?

do I need to generate a CSR on the load balancer or on the individual servers?
0
votes
3answers
6k views

How to manually install a SSL .cer on an IIS 6 site without CSR?

Every CSR generated by my site gave an error when submitted so I made a new site and the CSR worked fine. Now I have the certificate. However I can't find a way to install it on my original site. I ...
0
votes
2answers
498 views

What do CAs (Certificate Authority) deliver from CSR?

I need an SSL certificate for an HTTPS server. I'd like to offer the choice between self-signed and CA-signed certificates. I can generate a self-signed SSL certificate with the following OpenSSL ...
1
vote
2answers
894 views

Proper syntax for generating an SSL certificate CSR to protect an Exchange 2007 server

I need help generating a CSR for a Subject Alternative Name (SAN) SSL certificate to protect a new Exchange 2007 server. My main requirements are that Outlook Anywhere and OWA must work without any ...