Step 1

For generating a Certificate Signing Request (CSR) you should first create a certificate database. Do this by using the following command:

# certutil -N -d /here/your/path/

The response is:

Enter a password which will be used to encrypt your keys.
The password should be at least 8 characters long,
and should contain at least one non-alphabetic character.

Enter new password:
Re-enter password:

In this case /here/your/path/ will be the location where you want to have the certificate database.

Step 2

Now create the CSR with the following command:

# certutil -R -s "CN=www.hereyourname.com, O=Networking4all B.V., L=Amsterdam, ST=Noord-Holland, 
C=NL" -o mycert.req -a -g 2048 -d /here/your/path/

The response is:

Enter Password or Pin for "NSS Certificate DB":

A random seed must be generated that will be used in the
creation of your key.  One of the easiest ways to create a
random seed is to use the timing of keystrokes on a keyboard.

To begin, type keys on the keyboard until this progress meter
is full.  DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD!

Continue typing until the progress meter is full:

|************************************************************|

Finished.  Press enter to continue:

Generating key.  This may take a few moments...

The password is the password that you set in step 1.

Continue typing until the progress meter is full

Here you randomly use keys on your keyboard (don't hold the buttons).

Step 3

The last operation in Step 2 will create a file for you which is:

Certificate request generated by Netscape certutil
Phone: (not specified)

Common Name: www.hereyourname.com
Email: (not specified)
Organization: Networking4all B.V.
State: Noord-Holland
Country: NL

-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----

You should past the piece from "-----BEGIN NEW CERTIFICATE REQUEST-----" to "-----END NEW CERTIFICATE REQUEST-----" on our web site in the CSR field.