Generating a Certificate Signing Request (CSR) - Orion Application Server 2.0.2
Follow the below instructions to generate a CSR for your website. When you have completed generating your CSR, cut/copy and paste it into the CSR field on the SSL certificate-request page.
NOTE: Java 2 SDK 1.2 or above must be installed before you can generate your CSR. Once installed, you will be using the "keytool" command to create your key pair and CSR.
To Generate the Key Pair
- Enter the following command:
keytool -genkey -keysize 2048 -keyalg "RSA" -keystore keystore -storepass <your password> -validity 360NOTE: Validity may vary.
- Enter Distinguished Name (DN) information:
- First and last name - This is the Common Name: Common Name: The common name is the fully-qualified domain name - or URL - to which you plan to apply your certificate.
NOTE: If you are requesting a Wild Card certificate, please add an asterisk (*) on the left side of the Common Name (e.g., "*.coolexample.com" or "www*.coolexample.com"). This will secure all subdomains of the Common Name.
- Organizational unit - Use this field to differentiate between divisions within an organization. For example, "Engineering" or "Human Resources." If applicable, you may enter the
DBA (doing business as) name in this field. - Organization - The name under which your business is legally registered. The listed organization must be the legal registrant of the domain name in the certificate request. If you are enrolling as an individual, please enter the certificate requestor's name in the "Organization" field, and the DBA (doing business as) name in the "Organizational Unit" field.
- City/Locality - Name of the city in which your organization is registered/located. Please spell out the name of the city. Do not abbreviate.
- State/Province - Name of state or province where your organization is located. Please enter the full name. Do not abbreviate.
- Country code - The two-letter International Organization for Standardization- (ISO-) format country code for the country in which your organization is legally registered.
- First and last name - This is the Common Name: Common Name: The common name is the fully-qualified domain name - or URL - to which you plan to apply your certificate.
- Confirm that the Distinguished Name information is correct.
To Generate the CSR
- Enter the following command:
keytool -certreq -keyalg "RSA" -file <your file name>.csr -keystore keystore
- Enter the keystore password:
- If the password is correct then the CSR is created.
- If the password is incorrect then a password error is displayed.
- Cut/copy and paste the generated CSR into our online enrollment form.
