SSL Certificate Support
nginx 1.x
Using OpenSSL
1. Generate a key pare
A. openssl genrsa -des3 -out www.mydomain.com.key 2048
i. If you do not need your password, remove the option -des3
ii. key length : 2048 A key length of 1024 bit is the default, but WinCERT recommends the use of a 2048 bit key.
B. Example image
![](\"/images/supp/apache_genrsa_key.jpg\")
2. CSR 생성
A. openssl req -new -key www.wincert.com.key -out www.wincert.com.csr
i. Country Name (2 letter code) [XX]:Use the two-letter code without punctuation for country, for example: US or CA.
ii. Locality Name (eg, city) [Default City]:The Locality field is the city or town name, for example: Berkeley. Do not abbreviate. For example: Saint Louis, not St. Louis
iii. Organization Name (eg, company) [Default Company Ltd]:If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll. Example: XY & Z Corporation would be XYZ Corporation or XY and Z Corporation.
iv. Organizational Unit Name (eg, section) []: This field is optional; but can be used to help identify certificates registered to an organization. The Organizational Unit (OU) field is the name of the department or organization unit making the request. To skip the OU field, press Enter on your keyboard.
v. Common Name (eg, your name or your server\'s hostname) []: The Common Name is the Host + Domain Name. It looks like "www.company.com" or "company.com". For wildcard certificate the syntax should look like *.company.com
Please do not enter your email address, challenge password or an optional company name when generating the CSR.
B. Screen shot
![](\"/images/supp/apache_req_csr.jpg\")
C. Please enter the generated CSR when applying.
1. Generate a key pare
A. openssl genrsa -des3 -out www.mydomain.com.key 2048
i. If you do not need your password, remove the option -des3
ii. key length : 2048 A key length of 1024 bit is the default, but WinCERT recommends the use of a 2048 bit key.
B. Example image
2. CSR 생성
A. openssl req -new -key www.wincert.com.key -out www.wincert.com.csr
i. Country Name (2 letter code) [XX]:Use the two-letter code without punctuation for country, for example: US or CA.
ii. Locality Name (eg, city) [Default City]:The Locality field is the city or town name, for example: Berkeley. Do not abbreviate. For example: Saint Louis, not St. Louis
iii. Organization Name (eg, company) [Default Company Ltd]:If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll. Example: XY & Z Corporation would be XYZ Corporation or XY and Z Corporation.
iv. Organizational Unit Name (eg, section) []: This field is optional; but can be used to help identify certificates registered to an organization. The Organizational Unit (OU) field is the name of the department or organization unit making the request. To skip the OU field, press Enter on your keyboard.
v. Common Name (eg, your name or your server\'s hostname) []: The Common Name is the Host + Domain Name. It looks like "www.company.com" or "company.com". For wildcard certificate the syntax should look like *.company.com
Please do not enter your email address, challenge password or an optional company name when generating the CSR.
B. Screen shot
C. Please enter the generated CSR when applying.