Linux (CentOS 7) Generating CSR (Certificate Signing Requests)
Jun21

Linux (CentOS 7) Generating CSR (Certificate Signing Requests)

KB ID 0001206  Problem If you want to use digital certificates on your CentOS server, then you will need to generate a CSR. It does not matter if you want to purchase a publicly signed certificate, or even if you are going to sign your own. Below is how to generate a CSR for a single web host. Note: Most cert vendors now require a minimum key length of 2048 so thats what I’m going to use. And I’m assuming you have openSSL...

Read More
IIS: How to Create a Certificate Request
Nov17

IIS: How to Create a Certificate Request

KB ID 0000840  Problem If you would like to obtain a digital certificate either from your own CA, or from a public certificate vendor, you need to submit a certificate signing request (csr) first. Solution Note: I’m making the assumption you have already installed the Web Server (IIS) role on your server. 1. Windows Key+R > iis.msc {Enter} > Select the servername > Server Certificates. 2. Create Certificate Request >...

Read More

Exchange 2010 – Working with Certificates

KB ID 0000453 Problem Exchange 2010 installs with it’s own (self signed) certificate. To stay free of security errors and warnings, the best bet is to purchase a “publicly signed” digital certificate and use that. The following process uses the Exchange Management console to create a CSR (Certificate Signing Request). Then what to do with the certificate, when it has been sent back to you. Solution Certificate...

Read More
Cisco ASA 5500 – Using a Third Party Digital Certificate
Nov17

Cisco ASA 5500 – Using a Third Party Digital Certificate

(For Identification, AnyConnect, and SSL VPN) KB ID 0000694 Problem A client asked me how to do this, so off I went to the test bench to work it out. Note: I’m this example In going to submit the request to, and issue the certificate from, my own windows domain certificate authority, you would send your request to a third party certificate authority, here’s a direct link to the certificate type you require. To use your own...

Read More