Code Sigining: CSR Generation (how to generate a CSR for Code Signing locally on your computer)

In the past, Code Signing requests automatically created a CSR/KEY pair inside your browser. Newer browsers don't support this feature anymore, unfortunately.

Fortunately there is an alternative and you can locally create a CSR/KEY pair and copy/paste the CSR when submitting your Code Signing request. After purchasing a code signing certificate and opening the configuration page, click "configure certificate" and when the request form is shown, simply chose "Manually Enter My CSR" and create the CSR on your computer locally, e.g. using java keystore tool:

keytool -genkey -alias server -keyalg RSA -keysize 4096 -keystore keystore.jks

Alternatively, you can use openssl:

openssl genrsa -out private-key.key 4096
openssl req -new -key private-key.key -out csr.txt

Please make sure the "COMMON NAME (CN)" is showing your correct Company Name (e.g. "Acme Ltd"), despite the other address data. For Indie Developers, please enter your first- and lastname instead.


Was this answer helpful?

 Print this Article

Also Read

Can you issue SSL certificates for .krd / .gov.krd (Kurdistan - Iraq) domains?

YES, the TLD has been added by GeoTrust / RapidSSL on our request for one of our customers. ;-)

Where can i get a Wildcard EV (Extended Validation) SSL certificate?

Unfortunately EV certificates cannot be Wildcard due to CA/B Forum policies, so the only option...

Multidomain SAN Upgrade: is it possible to purchase additional SAN slots later?

Yes, it is possible to increase the SAN slot count for an existing multi-domain SSL certificate....

How do i create a CSR (Certificate Sign Request) in Microsoft Exchange 2010? How do i install my SSL certificate in Exchange 2010 server?

YouTube: https://www.youtube.com/watch?v=GD0Ro0etUPQ

PositiveSSL Multi-Domain - How to change approval email address per domain (multidomain)

For example, if "admin@" is selected as approver having main domain specified as "domain.com" and...