Generating Certificate Signing Requests (CSR) with Namecheap

Generating a Certificate Signing Request (CSR)

Creating a new Certificate Signing Request (CSR)

It is not strictly necessary to generate a new CSR if one already exists for a given domain on the server. However, the recommendation is to generate a new CSR each time a certificate is renewed. If one already exists for a domain with a certificate being renewed, it's ok to use the existing CSR.

• Log in to cPanel account
• Security > SSL/TLS Manager
• Private Keys (KEY) > Generate, view, upload, or delete your private keys
• Generate a New Private Key
  • Key Size: (At least 2048 bits)
  • Description: Something that will identify which certificate is using the key, e.g. [DOMAIN_NAME] ([MM/YYYY])
  • Click Generate
• The next page displays the newly generated private key.
  • Click Return to SSL Manager
• Certificate Signing Requests (CSR) > Generate, view, or delete SSL certificate signing requests
• Generate a New Certificate Signing Request (CSR)
  • Key Select the private key that was generated earlier from the dropdown list.
  • Domains Enter the subdomain that will be using the SSL certificate
  • City
  • State
  • Country
  • Company
  • Company Division not required
  • Email
  • Passphrase not required
  • Description not required
  • Click the Generate button
• On the following page copy the text following Encoded Certificate Signing Request: This text is what is needed to enter as the CSR for the SSL certificate.
• A certificate will be issued, after which it needs to be installed for the site.

Getting the CSR using an existing key

• Log in to cPanel.
• Security > SSL/TLS Manager
• Select the relevant domain from the Keys on Server table > Edit link
• Copy the text following Encoded Private Key:
• Click on the CSR: [domain_name] link at the bottom of the page (right above the "Delete Key" button).
• Copy the text following Encoded CSR:
• This code can be used as the CSR to renew the SSL certificate.