Generate CSR: Netscape Enterprise 3.51
Follow these instructions to generate a Private Key and CSR.
Creating a Key Pair
- Open a DOS window. At the command line, type:
cd \bin\admin\admin\bin
- Type
sec-key at the command prompt. A Netscape key-pair file generation
window appears.
- When prompted, type an alias for the new key-pair
file. You might choose an alias that matches your server (for example,
web or mail). The alias
cannot contain spaces, but it can use symbols that your operating
system allows in filenames (such as hyphens and underscores). By
default, the
key-pair file is stored in the directory
C:/<server_root>/alias/<alias>-key.db
where <alias> is the alias you entered. If you
used the alias mail, your key-pair file would be C:/<server_root>/alias/mail-key.db.
- Type OK. A screen with a progress meter appears. Move your mouse in
random motions at random speeds. These random movements are used to generate
a random number for the unique key-pair file.
- Enter a password.
- Return to the Keys and Certificates menu in the Netscape Suitespot
Server administration page.
Creating a Certificate Signing Request
- Start the Netscape administration page and login as administrator.
- Click on Keys and Certificates on the administration main menu.
- Select Request a Certificate on the navigation window.
- Click on New Certificate in the Request a Server Certificate window.
- Select CA URL (enter anything in the box, such as www.geocerts.com).
- Select the alias and password that you generated in the key-pair file.
-
You will be asked for several pieces of info which will be used by GeoTrust to create
your new SSL certificate. These fields include the Common Name (aka domain, FQDN), organization,
country, key bit length, etc. Use the CSR Legend in the right-hand column of this page
to guide you when asked for this information. The following characters should not
be used when typing in your CSR input: < > ~ ! @ # $ % ^ / \ ( ) ? , &
- Click OK when finished.
-
Save a copy of your CSR. The CSR will be needed during the online order
process. You'll be asked to copy-and-paste your CSR into a special CSR box.
Below is an example of what your CSR will look like. This
is a example only and cannot be used to generate your SSL certificate.
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
|
CSR Legend
When generating your CSR you will be asked to input
a few pieces of info. Below are some common fields with descriptions and examples.
(also see About the CSR)
Common Name (CN)
The fully-qualified-domain name for your certificate. Examples include...
- www.domain.com
- owa.domain.net
- secure.domain.ca
- *.domain.com (for wildcard SSL)
Organization (O)
The exact legal name of your organization. Do not abbreviate your
organization's name. Example: Metro Realty LLC or Flowers by Jenny
Organizational Unit (OU)
The section or division of the organization. Example: Sales, Support, Customer Service
City or Locality (L)
The city where your organization is legally located. Cannot be
abbreviated. Example: Atlanta
State (S) or Province
The state or province where your organization is legally located. Cannot
be abbreviated.. Example: Georgia
Country (C)
The two-letter ISO Country Code abbreviation for your country. Example: US, CA, GB (must be two-letters)
Email
Any email address. This field is arbitrary but must be filled in. GeoTrust
will not use this email address to process your order. Example: user@example.com
Key Bit Length
The key bit length has to do with the initial key exchange, not the
encryption strength of your certificate. GeoTrust recommends a key bit length of at least 1024.
|