Certificate Signing Request (CSR)

wikipedia:Certificate Signing Request (CSR)

Read CSR

• openssl req -text -noout -in root.csr

Create a CSR with subject CN=<common name>,O=<realm>, for example:

• certutil -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'

Generate a CSR

• openssl req -new -key example.org.key -out example.org.csr

file example.org.csr
example.org.csr: PEM certificate request

Related terms

• Kubernetes CertificateSigningRequest (CSR) API, since v1.18
• openssl ca -config
• /etc/letsencrypt/csr/
• macOS Keychain Access app
• PKCS10
• X.509

Activities

Keychain Access app activities

• Create a certificate
• Create a certificate authority (CA)
• Create a certificate for someone else as a Certificate Authority
• Request a certificate from a Certificate Authority
• Set the default Certificate Authority
• Evaluate a Certificate

See also

• Certificate, CSR (PKCS10), /etc/letsencrypt/csr/, openssl req, X.509, [.pem, .cer, .csr], Kubernetes CertificateSigningRequest
• openssl [ rand | s_client | passwd | openssl req | openssl rsa | openssl genrsa | openssl x509 | openssl ca | openssl verify | openssl ec | openssl dgst | openssl pkcs12 | openssl asn1parse | openssl help | .cer to .pem, openssl version
• Certificate, certificate extensions (.pem, .pfx), CSR, .csr, root certificate, public certificate
• PKI, OpenCA, openSSL, Certificate Transparency (CT), DogTag, FreeIPA, Key management, KMIP, CSR, /etc/pki/

https://gist.github.com/Soarez/9688998