Step 2 - Certificate Signing Request (CSR)

A Certificate Signing Request (CSR) is a file you generate on your web server before applying for the certificate. It contains your domain name, organization details, and your public key. The CA uses your CSR to generate your certificate.

⚠ IMPORTANT Important note displayed on screen The public key and signature algorithm from your CSR are used for certificate generation. Subject details such as Organization, Country, and State are pre-filled from your CSR for convenience but can be edited. The values you submit in the form will be the final values in the issued certificate.

Screen Fields

Skip CSR

An option to bypass CSR submission at this stage if you do not yet have one prepared. The CSR will then need to be provided before the certificate can be issued. Only use Skip CSR if specifically instructed by your administrator. In most cases, have your CSR ready before starting the application.

Upload CSR (Choose File button)

Upload a CSR file (.csr or .pem) directly from your computer. Click Choose File, navigate to your saved CSR file, and select it. The CSR text will be loaded automatically.

Paste CSR (text area)

An alternative to file upload - paste the raw CSR text directly into this box. Copy the full CSR text from your server (including the `-----BEGIN CERTIFICATE REQUEST-----` and `-----END CERTIFICATE REQUEST-----` lines) and paste it into this field.

CSR Format

A valid CSR looks like this:

-----BEGIN CERTIFICATE REQUEST-----

[several lines of base64-encoded text]

-----END CERTIFICATE REQUEST-----

Ensure you copy the entire block including the BEGIN and END lines.

Key Size Requirement

Your CSR must be generated using a minimum 2048-bit RSA key or 256-bit ECDSA key. Never share your private key - only the CSR (public portion) should be uploaded. Ensure the domain in your CSR matches the domain you will enter in Step 5.

After uploading or pasting your CSR, click Next to proceed to Step 3.