A CSR code (Certificate Signing Request) is a specific code and an essential part of the SSL activation process. It contains information about the website name and the company contact details. For many reasons, the code should be created on the hosting server end. For some servers, it is the obligatory condition.What is a CSR?
Note: Many hosting providers offer CSR code generation assistance to their clients where possible. Thus, it is worth checking with the web-hosting company whether they provide such a service and whether it is available in your hosting plan.
CSR generation instructions
You can generate a Certificate Signing Request code yourself, e.g. if you manage the hosting server on your own or if this is the best option for your server type/hosting plan. In this case, select your web server from the list below and follow the instructions.- Apache OpenSSL/ModSSL/Nginx/Heroku
- AWS
- Certreq
- cPanel
- CWP 7
- Citrix NetScaler VPX
- DirectAdmin
- Exchange 2007 (PowerShell)
- Exchange 2010
- Exchange 2013 (EAC)
- Exchange 2013 (Shell)
- Glassfish
- Google Cloud Service
- IIS 7
- IIS 8&10
- ISPConfig
- Mac OS via Keychain
- Mac OS X Server/Yosemite/El Capitan
- Namecheap EasyWP App
- Node.js
- Plesk 12
- Plesk Onyx
- SonicWall
- Sun Java System Web Server 7.x
- Synology NAS
- Tomcat (using keytool)
- Unifi
- Vesta CP
- Webmin
- WHM
- Windows with OpenSSL
- Zimbra
- using MMC/Certreq/Powershell on a Windows-based server
Note: CSR codes should have no less than 2048-bit key size.
CSR Generation Notes
If you do not see your server type listed above, click on this link for tips to generate CSR provided by the Sectigo Certificate Authority (CA).Alternatively, the following online tool can be used to generate CSR: https://decoder.link/csr_generator. You will find the instructions on how to use it in this article. Please make sure to save both the CSR and Private Key codes, as the latter one will be required for the certificate installation process on the server.
If you are activating a Multi-Domain certificate, and your server does not allow you to generate a CSR for multiple common names, activate your certificate using just one common name. You will be able to add all the required Subject Alternative Names (SANs) through your Namecheap account during the activation process.
If you're using hosting services from Namecheap, click here for instructions.
Please note: Normally, a dedicated IP address is required for SSL installation. However, you may install your SSL certificate on a shared IP address using the Server Name Indication (SNI) protocol extension available in your cPanel. You can learn more about the differences between a dedicated IP and SNI technology in the SNI Technology guide. When contacting our support team regarding this issue, please specify whether you wish to order a dedicated IP address or have your SSL installed on a server with a shared IP.
