Apache Mod nns - Generate CSR

A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).

Creating the Certificate DataBase

  • Execute the following command to create the certificate database: certutil -N -d /path/to/certificate/The option /path/to/certificate/ should be the filepath to where you want to store the certificate.The following response should now apear:Enter a password which will be used to encrypt your keys.The password should be at least 8 characters long,and should contain at least one non-alphabetic character.Enter new password:Re-enter password:
  • Enter a password twice, containing at minimum 8 characters and 1 digit or special character.

Create the CSR

  1. The CSR can now be created with the following command: certutil -R -s "CN=www.servercertificates.com, O=Xolphin, L=Heerhugowaard, ST=Noord-Holland, C=NL" -o www_servercertificates_com.req -a -g 2048 -d /path/to/certificate/The response should be:Enter Password or Pin for "NSS Certificate DB":
  2. Here you should enter the same password as we entered before when creating the database.The following text should apear:A random seed must be generated that will be used in the creation of your key. One of the easiest ways to create a random seed is to use the timing of keystrokes on a keyboard. To begin, type keys on the keyboard until this progress meter is full. DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD! Continue typing until the progress meter is full: |************************************************************| Finished. Press enter to continue: Generating key. This may take a few moments... Continue typing until the progress meter is full:
  3. Now keep entering some random keys on the keyboard (don't keep them pressed) until the indicator is full, and hit enter.A file will be created that looks like:Certificate request generated by Netscape certutil Phone: (not specified) Common Name: www.servercertificates.com Email: (not specified) Organization: Xolphin State: Noord-Holland Country: NL -----BEGIN NEW CERTIFICATE REQUEST----- FWc94gDObGwakZtdQvDJSrMU2gSWa1DLHDXsHSWHa/wUJRQ2KKU8Z1/lW03CrFcb I1VM8PnczqskfC3b7LZ9vn2w5Yydkt6t2zUU9g/rWRTgNawlgPwIHUqUsc3T23fs <<< meer regels code >>> hkiG9w0BAQUFAAOCAQEAUDQb8sKKgbMJTz0+FmiUnZW7AYciNwF50KT6vMJ7TB V/qrTMqErB+kluLFRYjWo+18pcrPfN3V5SPUUH4vuKJ8EH1staAccW2f/FSFZswr fsWjRGAG3pE0hWwob9aCYbT03n/E9CktfGhpZJ+rwerwec+= -----END NEW CERTIFICATE REQUEST-----

To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.

Order certficate


Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues