Generate and Submit a CSR
- This
step deals with orders that have the status 'Waiting for CSR'.
- If
your order has a status of 'Processing', then skip to Complete Domain Control Validation.
- If your order has a status of 'Issued', then skip to Install a certificate.
- If your order has a status of 'Awaiting Payment' then please select 'Complete Payment' to continue (click here if you'd like some more information on this).
To generate and submit a CSR:
- Locate an order with a status of 'Waiting for CSR', select 'Generate request' and click 'Apply'
- The 'Generate Request' form will open:
Generation Options:
- If you already have a CSR you wish to use, select the 'Paste CSR' radio button. Paste your CSR into the 'Your CSR' text area. Click 'Validate & parse' to test the CSR is correct then click 'Send' to submit the CSR to Comodo CA.
- If you do not already have a CSR, you can generate it using S³ (please note that this requires software agent to be installed and run) and complete all fields. Most are self-explanatory, but for those with little experience of certificates:
- Common Name: Fully Qualified Domain Name (for example, www.domain.com). This should be auto-populated. (Active if 'Multidomain' is checked)
- Domain list: Enter all domains covered by the certificate. Each domain should be on a separate line.
- Multidomain: Check this box if you purchased a multi-domain certificate. You should enter all domains covered by the certificate in the 'Domains List' box. Each domain must be specified in a separate line
- Organization: Your company Name (for example, 'My Company LLC')
- Organization Unit: Department (this can be the same as 'Organization' if your company doesn't require this field)
- Country/Region: The two-level country code for your country
- State/Province: The name of the state or Province in which your organization is located
- City/Locality: The name of the city in which your organization is located
- E-mail: Your contact email address
- 'Make Private Key Exportable' (For Windows only). If the private key is exportable then it will possible to export your certificate to another web-server. This is useful, for example, if you want to secure a load-balancing web-server or because you have switched to another hosting provider. We recommend you leave this box enabled unless you have specific reasons for making the private key non-exportable.
- Generate CSR on server: Choose the server on which the CSR should be generated. This should be the server which hosts the domain that you are getting the certificate for
After the CSR form is complete:
- Click 'Generate' to automatically create a CSR from the details you entered
- Click 'Save CSR to file' to save your CSR in .txt format on your local machine
- Click the 'Send' button to submit the CSR to Comodo. A confirmation window will appear:
The certificate status will change to ‘Processing’ and ‘Actions’ for this certificate will now contain three options – “Replace CSR”, “Domain control validation” and “Request Invoice”.
Comodo
will check the CSR details and conduct any required validation checks
on your company. Organization Validated certificates (like Instant
SSL) and Extended
Validation certificates require manual validation, so it might be a
day or two before the certificate is issued. Comodo staff will
contact you should they need any more information.
While this is in
progress you should complete Domain Control Validation (DCV).