What is a CSR?
CSR generation instructions
You can generate a Certificate Signing Request code yourself, e.g. if you manage the hosting server on your own or if this is the best option for your server type/hosting plan. In this case, select your web server from the list below and follow the instructions.
- Apache OpenSSL/ModSSL/Nginx/Heroku
- AWS
- Certreq
- cPanel
- CWP 7
- Citrix NetScaler VPX
- DirectAdmin
- Exchange 2007 (PowerShell)
- Exchange 2010
- Exchange 2013 (EAC)
- Exchange 2013 (Shell)
- Glassfish
- Google Cloud Service
- IIS 7
- IIS 8&10
- ISPConfig
- Mac OS via Keychain
- Mac OS X Server/Yosemite/El Capitan
- EasyWP App
- Node.js
- Plesk 12
- Plesk Onyx
- SonicWall
- Sun Java System Web Server 7.x
- Synology NAS
- Tomcat (using keytool)
- Unifi
- Vesta CP
- Webmin
- WHM
- Windows with OpenSSL
- Zimbra
- using MMC/Certreq/Powershell on a Windows-based server
Note: CSR codes should have no less than 2048-bit key size.
CSR Generation Notes
If you do not see your server type listed above, click on this link for tips to generate CSR provided by Sectigo Certificate Authority (CA).
Alternatively, the following online tool can be used to generate CSR: https://decoder.link/csr_generator. You will find the instructions on how to use it in this article. Please make sure to save both CSR and the Private Key codes, as the latter one will be required for the certificate installation process on the server.
If you are activating a Multi-Domain certificate, and your server does not allow you to generate a CSR for multiple common names, activate your certificate using just one common name. You will be able to add all required Subject Alternative Names (SANs) through your account during the activation process.
If you're using hosting services from , click here for instructions.
Please note: Normally, a dedicated IP address is required for SSL installation. However, you may install your SSL certificate on a shared IP address using the Server Name Indication (SNI) protocol extension available in your cPanel. You can learn more about the differences between a dedicated IP and SNI technology in the SNI Technology guide. When contacting our support team regarding this issue, please specify whether you wish to order a dedicated IP address or have your SSL installed on a server's shared IP.