<ol><li>Generate a certificate signing request (CSR)</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl req -new -key server.key -out server.csr
Country Name (2 letter code) [AU]:<em>US</em>
State or Province Name (full name) [Some-State]:<em>State</em>
Locality Name (eg, city) []:<em>City</em>
Organization Name (eg, company) []: <em>company name</em>
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []: <em>servername</em>
Email Address []:
A challenge password []:
An optional company name []:
</pre>The&nbsp;<em>servername</em>&nbsp;entered for the&nbsp;<tt>CN</tt>&nbsp;should match your web server's DNS name.
<li>Sign the CSR with the CA</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl x509 -req -days 3650 -in server.csr -CA ca.crt \
-CAkey ca.key -set_serial 01 -out server.crt
Signature ok
subject=/C=US/ST=State/L=City/O=company/CN=server
Getting CA Private Key
Enter pass phrase for ca.key: <em>*****</em></pre></ol>