All Tools > Generate CSR

Generate CSR

Before you order an SSL certificate, we recommend you generate a Certificate Signing Request (CSR) from your server or device.

A CSR is an encoded file that provides you with a standardized way to send DigiCert your public key andother identifying information for your company and domain name. When you generate a CSR, most server software asks for the following information: common name (e.g.,, organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048-bit minimum).

Common Platforms & Operating Systems

Microsoft IIS

CSR Generator: DigiCert Certificate Utility

Instructions: IIS 10 | IIS 8/8.5 | IIS 7 | IIS 5/6 | IIS 4 | PFX Import/Export

Apache Server (Open SSL)

CSR Generator: Open SSL CSR Wizard

Instructions: Apache Server | Ubuntu Server with Apache2 | PFX Import/Export

Tomcat Server (Keytool)

CSR Generator: Java Keytool CSR Wizard

Instructions: Tomcat Server | Java Based Server

Microsoft Lync

CSR Generator: DigiCert Certificate Utility

Instructions: Lync 2013 | Lync 2010

Note: To remain secure, SSL certificates must use keys that are 2048-bits in length or greater. If your server platform can't generate a CSR with a 2048-bit key, please contact us. See this article for more information.

All CSR Creation Instructions by Platform/OS