Creating a Certificate Signing Request

Connect to your server.

At the prompt, type:

openssl req -new -nodes -keyout your_domain_name.key -out your_domain_name.csr

This command creates two files: the Private-Key file for the decryption of your SSL Certificate, and a certificate signing request (CSR) file that you will use later to order your certificate.

You will be prompted for information about your organization, beginning with geographic information. There may be default information set already. The city, state, etc. that you enter must represent the correct location of the organization.

You will be prompted for a Common Name (domain name), enter the fully qualified domain name (FQDN) for the site you are securing. If you will be ordering a Wildcard SSL Certificate your common name must start with *. (for example: *.ipsca.com).

We highly recommend that you choose a challenge password to increase security, though it is an optional field.

Your CSR and Key files will be saved to the current directory. Make sure to keep your Private Key file because you will need it when you install the certificate.

Create CSR:

Use a text editor to open the CSR. Copy and paste the entire block of text (including the BEGIN and END tags) into 'CSR' field of the ipsCA Certificate order form.

When creating a CSR you must follow these conventions.

Enter the information to be displayed in the certificate.

The following characters are not accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&

Wildcard certificates must start with *. characters

Contact ipsCA
For further Information:
Email:

Phone:
+34 91 6402052

Distinguished Name Field	Explanation	Example
Country Name	The two-letter ISO abbreviation for your country	US = United States
State or Province Name	The state or province where your organization is located. Can not be abbreviated.	Georgia
City or Locality	The city where your organization is located.	Atlanta
Organization Name	The exact legal name of your organization. Do not abbreviate	IPS S.L.
Organizational Unit	Optional for additional organization information	Marketing
Common Name (Server Host Name)	The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.	If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com
Server Admin.'s email address	Your email address	abc@yourURL.com

Submit your CSR to IPSCA.

CSR installation

Installing a Server Certificate using Qmail Open-SSL Web Server

Step one: Save the Certificate

IPSCA will send your Certificate by e-mail. You will also require an intermediate certificate available here ipsCACLASEA1.crt. Each certificate will look something like the following:
-----BEGIN CERTIFICATE----- JIEBSDSCEXoCHQEwLQMJSoZILvoNVQECSQAwcSETMRkOAMUTBhMuVrM mIoAnBdNVBAoTF1JTQSBEYXRhIFNlY3VyaXR5LCBJbmMuMRwwGgYDVQ QLExNQZXJzb25hIENlcnRpZmljYXRlMSQwIgYDVQQDExtPcGVuIE1hc mtldCBUZXN0IFNlcnZlciAxMTAwHhcNOTUwNzE5MjAyNzMwWhcNOTYw NTE0MjAyOTEwWjBzMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIER hdGEgU2VjdXJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydG lmaWNhdGUxJDAiBgNVBAMTG09wZW4gTWFya2V0IFRlc3QgU2VydmVyI DExMDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDU/7lrgR6vkVNX40BA q1poGdSmGkD1iN3sEPfSTGxNJXY58XH3JoZ4nrF7mIfvpghNi1taYim vhbBPNqYe4yLPAgMBAAEwDQYJKoZIhvcNAQECBQADQQBqyCpws9EaAj KKAefuNP+z+8NY8khckgyHN2LLpfhv+iP8m+bF66HNDUlFz8ZrVOu3W QapgLPV90kIskNKXX3a -----END CERTIFICATE-----

Create a combined .pem certificate file. Once you have received your Certificate file from your ipsCA, gather your new certificate files and the private key you generated when you created your CSR. Open a text editor and paste the contents of each key/certificate one after another in the following order:

1. The Private Key (your_domain_name.key)
2. The Primary Certificate (your_domain_name.crt)
3. The Intermediate Certificate (ipsCACLASEA1.crt.)
4. The Root Certificate (ipsServidores.crt.)

Make sure that you include the beginning and end tags on each certificate. The result should look like this:

-----BEGIN RSA PRIVATE KEY-----
(Your Private Key: your_domain_name.key)
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: ipsCACLASEA1.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: IPSSERVIDORES.crt)
-----END CERTIFICATE-----

Save the combined file as ipsCApack.pem -- This .pem certificate file should be ready for installation on your Qmail Server.

return to the top

© 1995 - 2007 ipsCA, IPS Certification Authority, S.L. all Rights reserved.
Our CPS summarized or complete, CRLs, Root Certificates and legal documents
can be found in our repository
Read our Privacy Policy and Terms of Use

facturacion electronica

SSL CERTIFICATEWILDCARD SSL CERTIFICATEWILDCARD SSL CERTIFICADOWILDCARD SSL CERTIFICATE

Creating a Certificate Signing Request

Explanation