Java Based Web Servers CSR Generation Instructions

Java Based Web Servers
(CSR Generation Procedures)

Use the keytool command to create the key file:
keytool -genkey -keyalg RSA -keystore domain.key -validity 360 (NOTE validity may vary)

The following questions will be asked if not known:

Enter keystore password:

Should you choose to enter and use a Keystore password, you will need to make sure that you save that password in a secure place. If you ever need to reinstall your certificate for any reason, you will be required to enter that password. If you forget the password and it is past 30 days from your purchase date, then you will be required to purchase a new certificate. An ounce of prevention will prevent this from happening.

What is your first and last name? - This is the "Common Name" (This is where you enter your domain name. Example: www.yourdomain.com)

If you are ordering a Wildcard Certificate, the Common Name field must be in the format of: * . yourdomain . com

What is the name of your organizational unit? (Example: IT Department)
What is the name of your organization? (Example: your company name)
What is the name of your City or Locality? (Example: Dallas)
What is the name of your State or Province? (Example: Texas)
What is the two-letter country code for this unit? (Example: US for United States) Click here for a complete list of codes.

You will then be asked if the information is correct:
Is CN=www.yourdomain.com, OU=Your Oganizational Unit, O=Your Organization, L=Your City, ST=Your State, C=Your Country correct?

When you answer 'y' or 'yes' the password is then requested:
Enter key password for <mykey>
NOTE: Make a note of this password
<mykey> is the default alias for the certificate

Backup the private key, as there is no means to recover it should it be lost. The private key is used as input in the command to generate a Certificate Signing Request (CSR). EBIZID will reissue certificates no more than 30 days from the time of purchase. If you do not backup your key and your server fails or other problems occur after the 30 days, you will then be required to purchase a new certificate. An ounce of prevention is all that is required to prevent this from happening.

Use the keytool command to create the CSR file:
keytool -certreq -keyalg RSA -file domain.csr -keystore domain.key

You will be prompted to enter the password.
Enter keystore password: (You created earlier)

If the password is correct then the CSR is created.

If the password is incorrect then a password error is displayed.

You will need the text from your new CSR when ordering your certificate.

What your CSR will look like when your finished.

When sending your CSR to EBIZID, you MUST copy and paste the entire CSR Request, including the beginning and ending lines as shown below.
-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----
Failure to do so will result in you having to resend your CSR in the correct format to EBIZID which will cause a prolonged delay in processing your order.