Generate CSR Instructions: Netscape Enterprise 3.51
Follow these instructions to generate a Private Key and CSR for your Web site.
Creating a Key Pair
- Open a DOS window. At the command line, type:
cd \bin\admin\admin\bin - Type
sec-keyat the command prompt. A Netscape key-pair file generation window appears. - When prompted, type an alias for the new key-pair
file. You might choose an alias that matches your server (for example,
web or mail). The alias
cannot contain spaces, but it can use symbols that your operating
system allows in filenames (such as hyphens and underscores). By
default, the
key-pair file is stored in the directory
C:/<server_root>/alias/<alias>-key.dbwhere<alias>is the alias you entered. If you used the alias mail, your key-pair file would beC:/<server_root>/alias/mail-key.db. - Type OK. A screen with a progress meter appears. Move your mouse in random motions at random speeds. These random movements are used to generate a random number for the unique key-pair file.
- Enter a password.
- Return to the Keys and Certificates menu in the Netscape Suitespot Server administration page.
Creating a Certificate Signing Request
- Start the Netscape administration page and login as administrator.
- Click on Keys and Certificates on the administration main menu.
- Select Request a Certificate on the navigation window.
- Click on New Certificate in the Request a Server Certificate window.
- Select CA URL (enter anything in the box, such as www.geocerts.com).
- Select the alias and password that you generated in the key-pair file.
- When creating a CSR you must follow these conventions. Enter the information
to be displayed in the certificate. The following characters cannot
be accepted: < > ~ ! @ # $ % ^ / \ ( ) ? , &
CSR Input Fields Field Explanation Example Common Name (CN)
(host name, FQDN, etc.)The fully qualified domain name for your web server. This must be an exact match. If you intend to secure the URL https://www.domain.com, then your CSR's common name must be "www.domain.com".
For https://secure.domain.com it must be "secure.domain.com".
For just https://domain.com it must be just "domain.com".
For https://owa.mailserver.net it must be "owa.mailserver.net".
A Wildcard for https://sub.primary-domain.com must be "*.primary-domain.com". The asterisk must be included for Wildcard CSR's.Organization (O) The exact legal name of your organization. Do not abbreviate your organization name. Metro Realty LLC or Flowers by Jenny Organizational Unit (OU) Section of the organization Sales Division or IT or Marketing City or Locality (L) The city where your organization is legally located. Cannot be abbreviated. Boston State (S) or Province The state or province where your organization is legally located. Cannot be abbreviated. Massachusetts Country (C) The two-letter ISO abbreviation for your country. US, CA, GB, (must be two-letters) Email Any email address. This field is arbitrary but must be filled in. GeoTrust will not use this email address to process your order. user@domain.com Key Bit Length The key bit length has to do with the initial key exchange, not the encryption strength of your certificate. GeoTrust recommends a key bit length of at least 1024 - Click OK when finished.
- Save a copy of your CSR. The CSR will be needed during the purchase
process. You'll be asked to copy-and-paste
your CSR into a special CSR box.
Below is an example of what your CSR will look like. This is a example only and cannot be used to generate your SSL certificate.-----BEGIN CERTIFICATE REQUEST----- MIIB3zCCAUgCAQAwgZ4xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdHZW9yZ2lhMRAw DgYDVQQHEwdBdGxhbnRhMREwDwYDVQQKEwhHZW9DZXJ0czEaMBgGA1UECxMRSW5l cm5ldCBNYXJrZXRpbmcxGTAXBgNVBAMTEHd3dy5nZW9jZXJ0cy5jb20xITAfBgkq hkiG9w0BCQEWEmFkbWluQGdlb2NlcnRzLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEA5KOi+RnRzBuBQeFYjrwZg1sfT7zr4L8j0Khuoj621x+lGBmFC76c kGclUIQBmuyp9T9NrNqAjGtEmgdFr6cWLJtgXgi+BaZDLX9BMYF49NuTggNoEUMX crQRAENHb2YthG2SEcF5p98RNcDPzWOA3a4AMvgkxDlDGYUhbcQhnt0CAwEAAaAA MA0GCSqGSIb3DQEBBAUAA4GBAIapt6Tw0BTYUwEAX0/oKvaaN/ghErR85jdW7xOD b1hL0yNfb495A7e/IQyBEP5a/v+QUOtibHS4geiPhH9etAI+DSQmctjbf6dMGJql gCXGwlsTbjPOSmNT+/X2Uvf1BlplwqAMDghEuFHsjshlypz1NEg94ri2K9N1VrBs
+iAv
-----END CERTIFICATE REQUEST-----






bitscan™