Editing Generating Certificate Signing Requests (CSR) with Namecheap

[[Category:SSL]] [[Category:Web Hosting]] [[Category:Web Development]]
== Generating a Certificate Signing Request (CSR) ==

=== Creating a new Certificate Signing Request (CSR) ===

<p class="alert alert-info">It is not strictly necessary to generate a new CSR if one already exists for a given domain on the server. However, the recommendation is to generate a new CSR each time a certificate is renewed. If one already exists for a domain with a certificate being renewed, it's ok [[#Getting the CSR using an existing key|to use the existing CSR]].</p>

* Log in to cPanel account
* '''Security''' > '''SSL/TLS Manager'''
* '''Private Keys (KEY)''' > '''Generate, view, upload, or delete your private keys'''
* '''Generate a New Private Key'''
** '''Key Size:''' ''(At least 2048 bits)''
** '''Description:''' ''Something that will identify which certificate is using the key, e.g. <nowiki>[DOMAIN_NAME] ([MM/YYYY])</nowiki>''
** Click '''Generate'''
* The next page displays the newly generated private key.
** Click '''Return to SSL Manager'''
* '''Certificate Signing Requests (CSR)''' > '''Generate, view, or delete SSL certificate signing requests'''
* '''Generate a New Certificate Signing Request (CSR)'''
** '''Key''' Select the private key that was generated earlier from the dropdown list.
** '''Domains''' ''Enter the subdomain that will be using the SSL certificate''
** '''City'''
** '''State'''
** '''Country'''
** '''Company'''
** '''Company Division''' ''not required''
** '''Email'''
** '''Passphrase''' ''not required''
** '''Description''' ''not required''
** Click the '''Generate''' button
* On the following page copy the text following '''Encoded Certificate Signing Request:''' This text is what is needed to enter as the CSR for the SSL certificate.
* A certificate will be issued, after which it needs to be installed for the site.<ref>[https://www.namecheap.com/support/knowledgebase/article.aspx/9445/0/cpanel Generating a CSR using cPanel], Namecheap knowledgebase</ref>

=== Getting the CSR using an existing key ===

* Log in to cPanel.
* '''Security''' > '''SSL/TLS Manager'''
* Select the relevant domain from the '''Keys on Server''' table > '''Edit''' link
* <strike>Copy the text following '''Encoded Private Key:'''</strike>
* Click on the '''<nowiki>CSR: [domain_name]</nowiki>''' link at the bottom of the page (right above the "Delete Key" button).
* Copy the text following '''Encoded CSR:'''
* This code can be used as the CSR to renew the SSL certificate. <ref>[https://www.namecheap.com/support/knowledgebase/article.aspx/9445/0/cpanel Generating a CSR using cPanel], Namecheap Knowlegebase</ref>

== Notes==
<references />