How do I generate the Certificate Signing Request (CSR) for my SSL certificate?

Only University faculty or staff members my request SSL certificates. To obtain a SSL certificate for your server, log in to the WebStore and select Unit Purchase (certificates are not available for Personal Purchase). Place an order for SSL InCommon Comodo Certificate.   We offer 1-year new requests and renewals.  

How do I generate the Certificate Signing Request (CSR) for my SSL certificate?

The following document informs you of the process of generating a digital certificate. For help with obtaining a digital certificate see the following article: How do I obtain an SSL certificate?

Certificate Signing Request (CSR)

The certificate signing request (CSR) must be created from a 2048-bit or larger key pair. Check the Sectigo's How-to Guides for your particular web server and instructions for generating a certificate signing request. At some point during the process you will be prompted to enter values for the following six  (Sectigo recommends only three [CN, SAN, Country]) fields that will be encoded in your certificate:

  • Common-name :

  • Subject Alternate Names (DNS) :,

  • Organization : University of Illinois at Chicago

  • Organizational Unit : Department Name

  • Locality : Chicago

  • State : Illinois

  • Country : US

Enter the appropriate values for your server (Common-name) and department (Organizational Unit). All other fields should be entered exactly as shown: no abbreviations (IL, must be Illinois), punctuation, capitalization, extra spaces, et cetera. 

If you are prompted for a webmaster’s email address, phone number, or challenge phrase, enter any reasonable values. These three items are optional and not actually used to create your certificate. If during the process your server prompts you for a Certificate Authority, enter

Your server will either store the certificate request in a file or email it to (it will tell you which of these things it does). If it stored the certificate request in a file, email the contents of that file to After your request is processed, you will receive an email from with directions on how to install the certificate. If you haven't received a response after three full business days since emailing your request, send an inquiry to

CSR Generation using OpenSSL

How to generate a Certificate Signing Request on Apache Mod_SSL/OpenSSL

CSR Generation using Microsoft IIS

Microsoft IIS 5.x & 6.x 

Microsoft IIS 7.x 

Microsoft IIS 8.x 

General Help on CSR Generation

----- example -----

Might want to use direct links instead of “Header + URL”

General Help on CSR Generation 

----- example ----- 

----- this should possibly be its own KB on installation -----

Certificate Installation: Apache w/mod_ssl

Certificate Installation Microsoft IIS

Note: As an alternative to the manual instructions on this page, Comodo offers a free utility which will automatically install your certificate on your IIS website; SSL Management without the hassle.

Keywords:InCommon Comodo certificate, CSR, CSR generation, Apache, Microsoft IIS, Open SSL, SSL/TLS Certificates   Doc ID:92437
Owner:Jason R.Group:University of Illinois Chicago Technology Solutions
Created:2019-06-13 20:56 CSTUpdated:2020-11-10 11:20 CST
Sites:University of Illinois Chicago Technology Solutions
Feedback:  0   0