To get a certificate that is signed by a CA, first you generate a
(CSR).unix> openssl req -new -config ./openssl.cnf -key gryffindor.key \\ -out gryffindor.csr win> \"C:\\Program Files\\GnuWin32\\bin\\openssl.exe\" req -new \\ -config ./openssl.cnf -key gryffindor.key -out gryffindor.csr
You will be asked to provide some information about the identity of your server, such as the name of your Organization etc. Common Name (CN) is your domain name, like: \"www.gryffindor.com\".