How to Generate Certificate Signing Request on Apache ECC

Before generating an ECC CSR (Elliptic Curve Cryptography Certificate Signing Request) and ordering an ECC SSL Certificate from us, make sure that your environment is compatible with ECC SSL Certificates. For more information about Elliptic Curve Cryptography, see Elliptic Curve Cryptography ECC explained.

Use these instructions to generate the ECC CSR.

How to Create Your ECC CSR (Certificate Signing Request) using Apache

1. Log into your Apache server.
2. At the prompt, type the following command to generate an ECC private key using the OpenSSL ecparam tool to generate your .key file:<strong>openssl ecparam -out server.key -name prime256v1 -genkey</strong>

   Where server is the name of your server.

   Note: Recommended ECC key size is 256-bit. If greater encryption strength is required, your other private key options are prime384v1 or prime521v1.

3. Save (backup) the generated .key file, making sure to note its location. This private key is required later for ECC SSL Certificate installation.
4. Next, type the following command to generate a ECC certificate signing request (CSR):<strong>openssl req -new -key server.key -out server.csr</strong>

   Where server is the name of your server.

5. As you are prompted, enter the following information:

   For fields that are not required, you can enter '.' and those fields will be left blank.

   Country Name (2 letter code) [AU]:	Type the two letter code for the country where your company is legally located.
   State or Province Name (full name) [Some-State]:	Type the name of the state or providence where your company is legally located.
   Locality Name (eg, city) [ ]:	Type the name of the city where your company is legally located.
   Organization Name (eg, company) [Internet Widgits Pty Ltd]:	Type your companys legally registered name.
   Organizational Unit Name (eg, section) [ ]:	Type the name of the department within your organization that you want to
   	appear on the ECC SSL Certificate.
   Common Name (e.g. server FQDN) [ ]:	Type the fully qualified domain name (i.e. www.example.com) for the site that
   	you are securing.
   	Note: If you are generating an Apache CSR for a Wildcard SSL Certificate,
   	your common name should start with an asterisk (i.e. *.example.com).

6. This creates your openssl.csr file.
7. Now, open the .csr file with a text editor and copy the text of your CSR, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and paste it into the order form.

   Note: During your SSL Certificate ordering process, make sure that you select Apache when asked to Select Server Software. This option ensures that you receive all the required certificates for Apache certificate installation.

   <strong>-----BEGIN NEW CERTIFICATE REQUEST----- MIICvDCCAaQCAQAwdzELMAkGA1UEBhMCVVMxEjAQBgNVBAgTCVlvdXJTdGF0ZTER MA8GA1UEBxMIWW91ckNpdHkxCzAJBgNVBAsTAklUMRowGAYDVQQKExFZb3VyQ29t cGFueSwgSW5jLjEYMBYGA1UEAxMPd3d3LmV4YW1wbGUuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA379BFFxfACdXsUk2wrQka/nAlKbo+I9DAW32 +/SRxj/KtXVddscKW1obHGpMKPw4meJqOpQwJkIChYjSUQSpPKzdGpccDMf/eoF0 J7EaQ2szLv9AqdRQw2Aaek8SmocVmd3LxEOX4VvALBOMLHVrB5/vhYfGECLJbc3l RdEbdXyHDtHklRAoIVQCfjTwBWGNAD337vmHW7Q0R6FYUoa4fcJh7Rv6jHSywqwx 7pVfaDbZPuTgUhw7wksKNFxccG0xcTMr/+GrciHEuZ0chq86CBP9RIyLpp2+RMSf m6rMEYm9o65j7vEYaKEJUOJtA5MIs/ZjaXfS1LjXurLU0nCOQQIDAQABoAAwDQYJ KoZIhvcNAQEFBQADggEBAK159goyAYOpcnrQ2EvCGlizrK1kS3D8JjnAiP1NHrjB /qdTYR+/8Dr/hMcwwU5ThGAVf68eMkk6tUNwAdpZ9C904Js2z+ENEbO8GA0Fc4rw ix7vb15vSXe3shGijRGIzzHVGRoR3r7xQtIuMaDAr3xlV8jHbcvZTcpX0Kbq6H1G NLA4CXsOI4KGwu4FXfSzJEGb3gEJD8HaMP8V8er5G0owv/g/1Z/1/b0g97kAcUwk M2eDsvPhMx/pENGbnLPe4XMy7NPiEdzFnaYtUy2BDcXj3ZQEWxRWklERgg9/YcWI obf5ziuNm1Df24NBt5tpCNzfGviKT6/RYfWg7ADFcsf= -----END NEW CERTIFICATE REQUEST-----</strong>
8. After you receive your ECC SSL Certificate, you can install it.