{"id":1033,"date":"2021-07-23T12:43:57","date_gmt":"2021-07-23T12:43:57","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/generate-an-ssl-certificate-and-signing-request\/"},"modified":"2021-07-23T12:43:57","modified_gmt":"2021-07-23T12:43:57","slug":"generate-an-ssl-certificate-and-signing-request","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/generate-an-ssl-certificate-and-signing-request\/","title":{"rendered":"Generate an SSL Certificate and Signing Request"},"content":{"rendered":"<\/p>\n
\n
\n
\n

Valid for versions 92 through the latest version<\/em><\/p>\n<\/div>\n

\n

Version:<\/h4>\n

82<\/h4>\n

92<\/h4>\n<\/div><\/div>\n
\n

Overview<\/h2>\n

This feature allows you to simultaneously generate both a self-signed SSL certificate and a certificate signing request (CSR) for a domain. You can also use this interface to generate private keys, which are essential for self-signed certificates and purchased certificates. To purchase a certificate, submit the CSR to your chosen certificate authority (CA). They will provide you with a certificate, typically in a .zip<\/code> file via email.<\/p>\n

For more information, read our Purchase and Install an SSL Certificate documentation.<\/p>\n

Contact Information<\/h2>\n

To receive the SSL certificate, private key, and CSR in an email, enter an email address in the Email Address<\/em> text box.<\/p>\n

Select the When complete, email me the certificate, key, and CSR.<\/em> checkbox to receive a copy of the request that this interface generates.<\/p>\n

\n
Important:<\/div>\n
\n Do not<\/strong> select this checkbox if your email service provider does not support secure mail via SSL\/TLS.\n <\/div>\n<\/div>\n

Private Key Options<\/h2>\n

Select the desired key from the Key Type<\/em> menu. You can select from the following keys:<\/p>\n

    \n
  • \n

    RSA, 2,048-bit – (default)<\/em><\/p>\n<\/li>\n

  • \n

    ECDSA, P-384 (secp384r1)<\/em><\/p>\n<\/li>\n

  • \n

    ECDSA, P-256 (prime256v1)<\/em><\/p>\n<\/li>\n

  • \n

    RSA, 4,096-Deliverability<\/em><\/p>\n<\/li>\n<\/ul>\n

    For information about each of these keys, read our SSL\/TLS Key Types documentation.<\/p>\n

    Certificate information<\/h2>\n

    To generate an SSL certificate and CSR, perform the following steps:<\/p>\n

      \n
    1. In the Domains<\/em> text box, enter the domain name of the website that the certificate will secure.\n
        \n
      • You can enter a wildcard-formatted domain name to install the same certificate on any number of subdomains if they share an IP address. For example, you can use a wildcard certificate for *.example.com<\/code> to securely connect to the mail.example.com<\/code> and www.example.com<\/code> domains.<\/li>\n
      • You can also enter multiple domains, with one domain per line.<\/li>\n
      • For more information about how to share SSL certificates, read our Manage SSL Hosts documentation.<\/li>\n<\/ul>\n<\/li>\n
      • In the City<\/em> text box, enter the complete name of the city in which your servers are located.<\/li>\n
      • In the State<\/em> text box, enter the complete name of the state in which your servers are located.<\/li>\n
      • In the Country<\/em> text box, select the country of origin for the certificate.<\/li>\n
      • In the Company Name<\/em> text box, enter your business\u2019s complete name.\n
        \n
        Note:<\/div>\n
        \n Some certificate authorities may not accept special characters in the Company Name and Company Division<\/em> text boxes. If your company name includes symbols other than a period or a comma, ask your CA to confirm whether you can use these characters.\n <\/div>\n<\/div>\n<\/li>\n
      • In the Company Division<\/em> section, enter the name of the department or group within the company. This information is optional.<\/li>\n
      • In the Email<\/em> text box, enter a secure contact email address that your CA can use to verify domain ownership.<\/li>\n<\/ol>\n

        Shared Secrets<\/h2>\n

        Enter a passphrase in the Passphrase<\/em> text box if your certificate authority requires one for verification purposes.<\/p>\n

        Create<\/h2>\n

        After you enter the correct information, click Create<\/em>. WHM will display the CSR with its SSL certificate and private key.<\/p>\n

          \n
        • Copy and paste these items into the correct directories.<\/li>\n
        • If you provided an email address, the system also sends the information to that email address.<\/li>\n
        • You can view the keys, certificates, and CSRs that you create in WHM\u2019s SSL Storage Manager<\/em> interface (WHM<\/em> >> Home<\/em> >> SSL\/TLS<\/em> >> SSL Storage Manager<\/em>).<\/li>\n<\/ul>\n
          \n
          Note:<\/div>\n
          \n

          The system saves this information in the following directories on your servers:<\/p>\n

            \n
          • CSR \u2014 \/var\/cpanel\/ssl\/system\/csrs<\/code><\/li>\n
          • SSL certificates \u2014 \/var\/cpanel\/ssl\/system\/certs<\/code><\/li>\n
          • Private keys \u2014 \/var\/cpanel\/ssl\/system\/keys<\/code><\/li>\n<\/ul><\/div>\n<\/div>\n

            If you purchased an SSL certificate, provide the CSR to the company from which you purchased the SSL certificate.<\/p>\n

            If you used a self-signed certificate, navigate to WHM\u2019s Install an SSL Certificate on a Domain<\/em> interface (WHM<\/em> >> Home<\/em> >> SSL\/TLS<\/em> >> Install an SSL Certificate on a Domain<\/em>) to install the certificate.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

            Valid for versions 92 through the latest version Version: 82 92 Overview This feature allows you to simultaneously generate both a self-signed SSL certificate and a certificate signing request (CSR) for a domain. You can also use this interface to generate private keys, which are essential for self-signed certificates and purchased certificates. To purchase a …<\/p>\n","protected":false},"author":1,"featured_media":1034,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/1033"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=1033"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/1033\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/1034"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=1033"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=1033"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=1033"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}