Generate CSR - OpenSSL

This Article helps you to Generate the CSR and Key file using Openssl.

First switch the working directory:-

GNU/Linux & Mac OS X users:
Open a terminal and browse to that folder :-

Windows Users:
Navigate to your OpenSSL "bin" directory

Generate a CSR & Private Key:

openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privatekey.key

Note: To generate a 4096-bit CSR you can replace the rsa:2048

openssl req -out CSR.csr -new -newkey rsa:4096 -nodes -keyout privatekey.key

Fill out the following fields as prompted:
Note: The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&

Field Example
Country Name NO (2 Letter Code)
State or Province Oslo (Full State Name)
Locality Oslo (Full City name)
Organization Your Organization (Entity's Legal Name)
Organizational Unit   Support (Optional, e.g. a department)
Common Name your CN (normally your domain name or your Entity)

For file Conversion, see this link