{"id":27854,"date":"2026-03-04T18:29:19","date_gmt":"2026-03-04T16:29:19","guid":{"rendered":"https:\/\/www.cheops-technology.ch\/docs\/how-do-i-generate-a-csr-from-linux\/"},"modified":"2026-03-05T12:58:42","modified_gmt":"2026-03-05T10:58:42","password":"","slug":"how-do-i-generate-a-csr-from-linux","status":"publish","type":"docs","link":"https:\/\/www.cheops-technology.ch\/en\/docs\/how-do-i-generate-a-csr-from-linux\/","title":{"rendered":"How do I generate a CSR from Linux?"},"content":{"rendered":"\n<p>From your Amber cloud, go to the desired folder<\/p>\n\n<p><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">Before you can generate a CSR, you need the private key<br\/>See the article: <a href=\"https:\/\/www.cheops-technology.ch\/docs\/comment-generer-une-cle-privee-depuis-un-linux\/\" type=\"docs\" id=\"27571\">How do I generate a private key from Linux?<\/a><\/mark><\/p>\n\n<p>Type the following command and fill in the required information:<\/p>\n\n<ol class=\"wp-block-list\">\n<li>Normal CSR<\/li>\n<\/ol>\n\n<div class=\"betterdocs-code-snippet-wrapper theme-light betterdocs-code-snippet-bm5mfiw\"\n     id=\"betterdocs-code-snippet-bm5mfiw\"\n     data-language=\"bash\"\n     data-copy-button=\"true\">\n\n    \n    <div class=\"betterdocs-code-snippet-content\">\n        \n        <pre class=\"betterdocs-code-snippet-code language-bash\"><code>openssl req -new -key www.yourdomain-example.com.key -out www.yourdomain-example.com.csr\n\n# Retour de la commande :\n\nGenerating\nRSA private key, 2048 bit long modulus\n....+++\n..............+++\ne is 65537 (0x10001)<\/code><\/pre>\n    <\/div>\n<\/div>\n\n<script type=\"text\/javascript\">\ndocument.addEventListener('DOMContentLoaded', function() {\n    \/\/ Initialize copy functionality for this specific snippet\n    const snippet = document.getElementById('betterdocs-code-snippet-bm5mfiw');\n    if (snippet && window.BetterDocsCodeSnippet) {\n        window.BetterDocsCodeSnippet.initCopyButton(snippet);\n    }\n});\n<\/script>\n\n<p>2. CSR with SAN (Subject Alternative Name)<\/p>\n\n<ol class=\"wp-block-list\"><\/ol>\n\n<p>You need to generate a file that we&#8217;ll call &#8220;openssl.cnf&#8221; in which we&#8217;ll put all the information we want about the  [alt_names]<\/p>\n\n<div class=\"betterdocs-code-snippet-wrapper theme-light betterdocs-code-snippet-0ad5c2e3\"\n     id=\"betterdocs-code-snippet-0ad5c2e3\"\n     data-language=\"bash\"\n     data-copy-button=\"true\">\n\n    \n    <div class=\"betterdocs-code-snippet-content\">\n        \n        <pre class=\"betterdocs-code-snippet-code language-bash\"><code>[req]\ndistinguished_name = req_distinguished_name\nreq_extensions = v3_req\n \n[req_distinguished_name]\ncountryName                     = Country Name (2 lettres)\ncountryName_default             = CH\nstateOrProvinceName             = Canton (2 lettres)\nstateOrProvinceName_default     = GE\nlocalityName                    = Ville (nom complet)\nlocalityName_default            = Geneva\n0.organizationName              = Nom de l&#039;entreprise\n0.organizationName_default      = DFi Service SA\norganizationalUnitName          = Departement\norganizationalUnitName_default  = IT\ncommonName                      = Common Name\ncommonName_default              = mail.domaine.com\ncommonName_max                  = 64\nemailAddress                    = adresse email\nemailAddress_default            = administrator@domaine.com\nemailAddress_max                = 40\n \n[ v3_req ]\n# Extensions to add to a certificate request\nbasicConstraints = CA:FALSE\nkeyUsage = nonRepudiation, digitalSignature, keyEncipherment\nsubjectAltName = @alt_names\n \n[alt_names]\n# exemples \u00e0 personnaliser suivant le besoin\nDNS.1 = autodiscover.domaine.com\nDNS.2 = remote.domaine.com<\/code><\/pre>\n    <\/div>\n<\/div>\n\n<script type=\"text\/javascript\">\ndocument.addEventListener('DOMContentLoaded', function() {\n    \/\/ Initialize copy functionality for this specific snippet\n    const snippet = document.getElementById('betterdocs-code-snippet-0ad5c2e3');\n    if (snippet && window.BetterDocsCodeSnippet) {\n        window.BetterDocsCodeSnippet.initCopyButton(snippet);\n    }\n});\n<\/script>\n\n<p>Then type the following command and finish filling in the fields:<br\/><br\/><\/p>\n\n<div class=\"betterdocs-code-snippet-wrapper theme-light betterdocs-code-snippet-zaufw8b\"\n     id=\"betterdocs-code-snippet-zaufw8b\"\n     data-language=\"bash\"\n     data-copy-button=\"true\">\n\n    \n    <div class=\"betterdocs-code-snippet-content\">\n        \n        <pre class=\"betterdocs-code-snippet-code language-bash\"><code>openssl req -new -out www.yourdomain-example.com.csr -sha256 -key www.yourdomain-example.com.key -config openssl.cnf\n\n# Retour de la commande :\n\nYou are about to be asked to enter information that will be incorporated\ninto your certificate request.\nWhat you are about to enter is what is called a Distinguished Name or a DN.\nThere are quite a few fields but you can leave some blank\nFor some fields there will be a default value,\nIf you enter &#039;.&#039;, the field will be left blank.\n-----\nCountry Name (2 lettres) [CH]:CH\nCanton (2 lettres) [GE]:GE\nVille (nom complet) [Geneva]:Plan-les-Ouates\nNom de lentreprise [DFi Service SA]:Mon Entreprise SA\nDepartement [IT]:RSSI\nCommon Name [mail.domaine.com]:www.yourdomain-exemple.com\nadresse email [administrator@domaine.com]:administrator@yourdomain-exemple.com<\/code><\/pre>\n    <\/div>\n<\/div>\n\n<script type=\"text\/javascript\">\ndocument.addEventListener('DOMContentLoaded', function() {\n    \/\/ Initialize copy functionality for this specific snippet\n    const snippet = document.getElementById('betterdocs-code-snippet-zaufw8b');\n    if (snippet && window.BetterDocsCodeSnippet) {\n        window.BetterDocsCodeSnippet.initCopyButton(snippet);\n    }\n});\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>From your Amber cloud, go to the desired folder Before you can generate a CSR, you need the private keySee the article: How do I generate a private key from Linux? Type the following command and fill in the required information: 2. CSR with SAN (Subject Alternative Name) You need to generate a file that [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[129],"doc_tag":[],"class_list":["post-27854","docs","type-docs","status-publish","hentry","doc_category-ssl-certificates"],"year_month":"2026-05","word_count":84,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"Support","author_nicename":"support","author_url":"https:\/\/www.cheops-technology.ch\/en\/author\/support\/"},"doc_category_info":[{"term_name":"SSL Certificates","term_url":"https:\/\/www.cheops-technology.ch\/en\/docs-category\/ssl-certificates\/"}],"doc_tag_info":[],"_links":{"self":[{"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/docs\/27854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/comments?post=27854"}],"version-history":[{"count":1,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/docs\/27854\/revisions"}],"predecessor-version":[{"id":27856,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/docs\/27854\/revisions\/27856"}],"wp:attachment":[{"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/media?parent=27854"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/doc_category?post=27854"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.cheops-technology.ch\/en\/wp-json\/wp\/v2\/doc_tag?post=27854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}