blog/content/posts/create-a-csr/index.md

title	tags	date	aliases	canonicalURL	summary
Create a CSR with SAN	Certificates OpenSSL Quick Note TLS	2022-12-20T13:56:56.467033+00:00	/create-a-csr	/create-a-csr	How to generate a CSR for a basic certificate supported by modern browsers

Another quick note today: how to generate a CSR for a basic certificate supported by modern browsers (includes Subject Alternative Name).

Config file

# example.conf
[req]
prompt = no
distinguished_name = dn
req_extensions = req_ext

[dn]
CN = example.com
O = Company Name
L = Lyon
C = FR

[req_ext]
subjectAltName = DNS: example.com, IP: 192.168.1.1

Of course, remember to adjust the settings according to the organization you're creating the CSR for:

• [dn] (distinguished name) section
• subjectAltName line (DNS and IP)

Private key

openssl genrsa -out example.key 4096

CSR

openssl req -new -config example.conf -key example.key -out example.csr