Generating a Certificate Signing Request (CSR) - Microsoft IIS7
To complete your online request form for an SSL, you need a Certificate Signing Request (CSR). Follow these instructions to generate a CSR for your website. After you generate your CSR, copy and paste it into the CSR field on the SSL certificate request page.
NOTE: You must have at least Service Pack 1 installed before generating a CSR.
To Generate a Certificate Signing Request (CSR) — Microsoft IIS 7
- To get to the IIS Manager click Start, Administrative Tools, and then Internet Information Services (IIS) Manager.
- In the left panel, click the server name where you want to generate the CSR.
- In the middle panel, double click Server Certificates.
- In the Actions panel on the right, click Create Certificate Request... .
- Enter Distinguished Name Properties, and then click Next.
NOTE: The following characters are not accepted when entering information: < > ~ ! @ # $ % ^ * / \ ( ) ? &
- Common Name — The fully-qualified domain name — or URL — for which you plan to use your certificate, e.g., the area of your Website you want customers to connect to using SSL.
- An SSL certificate issued for www.coolexample.com is not valid for secure.coolexample.com. If you want your SSL to cover secure.coolexample.com, make sure the common name submitted in the CSR is secure.coolexample.com.
- If you are requesting a Wildcard certificate, please add an asterisk (*) on the left side of the Common Name (e.g., *.coolexample.com or *.secure.coolexample.com). This only secures the subdomains one place before the common name.
- Organization — The name in which your business is legally registered. The organization must be the legal registrant of the domain name in the certificate request.
- If you are enrolling as an individual, enter the certificate requestor's name in the Organization field, and the Doing Business As (DBA) name in the Organizational Unit field.
- Organizational Unit — Use this field to differentiate between divisions within an organization. For example, "Engineering" or "Human Resources."
- City/Locality — The full name of the city in which your organization is registered/located. Do not abbreviate.
- State/Province — The full name of state or province where your organization is located. Do not abbreviate.
- Country — The two-letter International Organization for Standardization- (ISO-) format country code for the country in which your organization is legally registered.
- Common Name — The fully-qualified domain name — or URL — for which you plan to use your certificate, e.g., the area of your Website you want customers to connect to using SSL.
- In the Cryptographic Service Prover Properties window, select Microsoft RSA SChannel Cryptographic Provider for the Cryptographic service provider.
- Select a Bit length of 2048 or higher, and then click Next.
- Click …, enter the location and file name for your CSR, and then click Finish.
- Locate, copy, and paste the CSR into our online application.
- To get a copy right click on the .req file, select Open With, and then select a text editor like Notepad.
- Paste all of the text, including ----CERTIFICATE REQUEST---- and ----END CERTIFICATE REQUEST----, in our online request form.
For more information on how to request a certificate in our online request form, see Requesting a Standard or Wildcard SSL Certificate.
