Generate CSRBefore you order an SSL certificate, we recommend you generate a Certificate Signing Request (CSR) from your server or device.
A CSR is an encoded file that provides you with a standardized way to send DigiCert your public key andother identifying information for your company and domain name. When you generate a CSR, most server software asks for the following information: common name (e.g., www.example.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048-bit minimum).
Microsoft IIS
CSR Generator: DigiCert Certificate Utility
Instructions: IIS 10 | IIS 8/8.5 | IIS 7 | IIS 5/6 | IIS 4 | PFX Import/Export
Microsoft Exchange Server
CSR Generator: CSR for Exchange 2007 | DigiCert Certificate Utility
Instructions: Exchange 2016 | Exchange 2013 | Exchange 2010 | Exchange 2007 | PFX Import/Export
Apache Server (Open SSL)
CSR Generator: Open SSL CSR Wizard
Instructions: Apache Server | Ubuntu Server with Apache2 | PFX Import/Export
Tomcat Server (Keytool)
CSR Generator: Java Keytool CSR Wizard
Instructions: Tomcat Server | Java Based Server
Note: To remain secure, SSL certificates must use keys that are 2048-bits in length or greater. If your server platform can't generate a CSR with a 2048-bit key, please contact us. See this article for more information.