
Need multiple certificates? Buy in bulk and save £££s. Click Here to find out more
Creating your CSR is the first step in securing your webserver with SSL. Your CSR is unique and contains information about your organization and the domain you wish to secure. It must be generated on the server where your domain to be secured is hosted.
If you have direct access to your web server, follow the instructions on our CSR page
when you are done reading this page. If you use a hosting company, the CSR is normally generated for you by your hosting provider. Some control panels (Ensim, Plesk, CPanel) will allow you to generate your own CSR if your hosting provider has enabled that feature for you.
This is the information required to generate your CSR:
| Distinguished Name Fields | Explanation | Example |
| Country Name | The two-letter ISO abbreviation for your country. | US = United States |
| State or Province Name |
The state or province where your organization is located. Can not be abbreviated. |
Georgia |
| City or Locality |
The city where your organization is located. |
Atlanta |
| Company (Organization) Name |
The exact legal name of your organization. Do not abbreviate your organization name. |
My Company, Inc |
| Organizational Unit |
Optional for additional organizational information. |
Marketing |
| Common Name (Server Host Name) |
The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match. |
If you intend to secure the URL https://secure.mydomain.com, then your CSR's Server Hostname must be secure.mydomain.com |
| Server Administration email address (if applicable) |
Your email address |
abc@mydomain.com |
It is very important to get your Common Name (CN) right. The Common Name should be whatever your site users will see in their browser when they navigate to a secure page. Here are some examples:
| Common Name = | Secure site = |
| www.mydomain.com | https://www.mydomain.com |
| mydomain.com | https://mydomain.com |
| mail.mydomain.com | https://mail.mydomain.com |
| secure.mydomain.com | https://secure.mydomain.com |
| suppliers.mydomain.com | https://suppliers.mydomain.com |
| admin.mydomain.com | https://admin.mydomain.com |
Be sure to specify the "www" in my Common Name if you want your users to see https://www.yourdomain.com. If you do not specify "www" then your certificate(s) will only work on https://yourdomain.com. What your users see and what you're trying to secure must match exactly.
Remember - you cannot use any of the following characters in your CSR: < > ~ ! @ # $ % ^ * / \ ( ) ? & ,.
Also avoid including http:// or https:// in your common name and avoid using upper-case letters, such as www.MyDomain.com .
The information you supply about your organization and domain is used by your web server to generate a unique certificate signing request for your domain. The final result is an encrypted block of text that will look something like this:
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
When you paste this into our form during the ordering process, make sure you INCLUDE the -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST----- header and footer.
To find the CSR instructions for your webserver, click here.
|