AWS Management Console - Generate CSR
A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).
Using external certificates with the Amazon solutions requires you to create the private key and certificate signing request with OpenSSL. After the certificate has been issued, you can import the key-pair in the AWS Certificate Manager. The following OpenSSL commands can be used to create the private key and CSR for your Amazon instance:
To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.