Generating a Certificate Signing Request for Code Signing Certificates
When you request a code signing certificate, you need to provide a certificate signing request (CSR) for your computer.
Recent versions of Firefox® can automatically generate the CSR for you. However, if you use a different browser, such as Internet Explorer®, Google Chrome® or Safari®, you need to manually create the CSR using a tool, such as OpenSSL. For more information, visit http://www.openssl.org.
To Manually Generate a Certificate Signing Request for Code Signing Certificates
- Open OpenSSL.
- Run the following command:
openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key - Enter Distinguished Name information:
- Country Code — The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered.
- State/Province — Name of state or province where your organization is located — do not abbreviate.
- Locality — Name of the city in which your organization is registered/located — do not abbreviate.
- Organization Name — The full legal name of your organization.
- Organizational Unit — Optional.
- Common Name — The full legal name of your organization.
- Email Address — Your email address.
- Move CSR.csr and privateKey.key to your desktop.
When you complete the online request form, provide the information from the CSR.csr file. Open CSR.csr in a text editor, such as Notepad, copy all of the text and then paste it into the CSR field in the request. For more information, see Requesting a Code or Driver Signing Certificate.