General CSR Creation Guidelines
Protect your site with the world¡¯s most trusted TLS/SSL certificates.
Buy NowBefore you can get a TLS/SSL certificate, you must generate a Certificate Signing Request (CSR) from your server or device. Learn more about SSL certificates »
What is a CSR?
A CSR is an encoded file that provides a standardized way to send ÃÛÌÒTV your public key and some information identifying your company and domain name.
What information must I include in my CSR?
When you generate a CSR, most server software asks for the following information: common name (e.g., www.example.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size (2048-bit minimum).
If you're uncertain about the exact company name or location when generating the CSR, don't worry. We offer the flexibility to modify and finalize that information during our review process before issuing the certificate.
What do I do with my CSR?
Once you've created the CSR, you'll need to copy and paste it into the online form where you submit a request to get a TLS/SSL certificate.
Common Platforms & Operating Systems
![](/kb/images/iis.png)
Microsoft IIS
CSR Generator: Instructions:Learn More:
![](/kb/images/exchange.png)
Microsoft Exchange Server
CSR Generators: Instructions:Learn More:
![](/kb/images/apache.png)
Apache Server (OpenSSL)
CSR Generator: Instructions:Learn More:
![](/kb/images/tomcat.png)
Tomcat Server (Keytool)
CSR Generator: Instructions:Learn More:
![](/kb/images/ms-lync-logo.jpg)
Microsoft Lync
CSR Generator:
Instructions:Learn More:
2048-Bit Key Length Required
To remain secure, SSL certificates must use keys that are 2048-bits in length or greater.
Can't generate a CSR with a 2048-bit key on your server platform? Please contact us.
Wondering What Information is Needed for Your CSR?
- Common Name (fully qualified domain name [FQDN] your certificate will secure)
- Country (two-digit code)
- State or Locality (full names e.g., California or Barcelona)
- Organization Name (full legal company or personal name as registered in your locality)
- Organization Unit (department in your organization the certificate is for [e.g., IT or Marketing])
Generating a CSR for a Wildcard Certificate?
When generating a CSR for a Wildcard certificate, the common name must start with an asterisk (*) (e.g., *.example.com). The Wildcard character (*) can assume any name that doesn't have a dot character in it.
All CSR Creation Instructions by Platform/OS
- 2X Application Server
- 3Com Wireless LAN
- Adobe Connect
- AEP Netilla
- Alpha Five
- Apache (OpenSSL)
- AWS (OpenSSL)
- AWS (Utility)
- Barracuda Spam & Virus
- Barracuda SSL VPN
- Cerberus FTP Server
- Checkpoint VPN
- Cisco ASA
- Cisco Mobility
- Citrix Access Gateway
- Citrix Access Essentials
- Citrix NetScaler VPX
- Cobalt RaQ3x/4x/XTR
- CompleteFTP
- Courier IMAP
- cPanel
- Ensim Control Panel
- F5 BIG-IP
- F5 FirePass
- FileZilla Server
- Google App Engine
- Hsphere Web Server
- IBM Bluemix (OpenSSL)
- IBM Bluemix (Utility)
- IBM HTTP Server
- IBM Watson IoT (OpenSSL)
- IBM Watson IoT (Utility)
- iPlanet
- Java (Generic) Web Servers
- Lighttpd
- Lotus Domino Go 4.6.2.6+
- Lotus Domino 4.6x & 5.0x
- Lotus Domino 8.5
- Lync 2010
- Lync 2013
- Mac OS X Lion
- Mac OS X Mavericks
- Mac OS X Yosemite
- Mac OS X El Capitan
- Microsoft AD LDAP (2008)
- Microsoft AD LDAP (2012)
- Microsoft AD FS
- Microsoft Exchange 2007
- Microsoft Exchange 2010
- Microsoft Exchange 2013
- Microsoft Exchange 2016
- Microsoft Exchange 2016 (Utility)
- Microsoft Forefront TMG
- Microsoft IIS 4.x
- Microsoft IIS 5.x/6.x
- Microsoft IIS 7
- Microsoft IIS 8
- Microsoft IIS 10
- Microsoft OCS 2007
- Microsoft Office 365
- Microsoft Outlook Web Access
- Microsoft SharePoint 2010
- Microsoft SharePoint 2013
- Nginx
- NetScreen
- Novell ConsoleOne
- Novell I-Chain
- Oracle Wallet Manager
- Parse.com
- Plesk Server
- Qmail
- Radware Alteon
- Small Business Server 2011
- Small Business Server 2008
- SonicWALL NSA
- SonicWALL SSL VPN
- Sun Java Web Server
- SurgeMail
- Tomcat Server (Keytool)
- Tomcat Server (Utility)
- Ubuntu with Apache2 (OpenSSL)
- WebLogic 8 - 12.x
- Weblogic (previous versions)
- Webmin
- Website Pro
- Websphere
- WebSTAR
- WHM
- Windows Azure Cloud Services
- Windows Azure Website
- Windows Server 2016
- Windows Server 2012
- Windows Server 2008
- Zeus Loadbalancer
- Zeus Webserver
- Zimbra
- Zyxel Zywall
Get The Support You Need, When You Need It
ÃÛÌÒTV has an award-winning in-house technical support team that is here to help you with any digital certificate issues that you have. Our dedication to unparalleled customer support is reflected in the numerous service awards we have won.
Professional Support Available Anytime!
We try to keep our online documentation as up-to-date as possible. However, if you have a particular article or platform that you would like to see documentation for, please contact ÃÛÌÒTV Support.
- ÃÛÌÒTV Customers
- Customer Testimonials
The ÃÛÌÒTV Difference
- Set up SSL Certificate
- Check SSL Certificates Tool
- Configuring SSL
- Crear un CSR
SSL Certificate Tutorials
- Multi Domain
- Extended Validation
- PKI Public Key Infrastructure
- CertCentral