IIS: Generate CSR for Multi-Domain SSL
Last updated
Was this helpful?
Last updated
Was this helpful?
Let’s see how to generate a multi-domain CSR on a Windows Server that can be used to secure multiple domains. Let’s learn how to add multiple SAN, DNS, or Alt Names to the CSR.
Step 1. Open MMC on the Windows server
Hit Win + R to open the Run utilityType mmc in the box.Press Ok.
Step 2. Add Certificate Snap-in
Go to File > Add/Remove Snap-in..
Step 3. Select Certificates and press Add
Step 4. Select the User or Computer Certificate snap-in
Select the snap-in which you want to create the certificate. For demonstration, we are choosing a Compute account.Click Next.
Step 5. Select Local Computer
Select the local computer as you are going to create CSR on the same computer.Click Finish.
Step 6. Select Certificate (Local Computer) and click Ok
Step 7. Create Custom Request
Access your MMC snap-in> right-click the Personal folder.Select All Tasks > Advanced Operations > Create Custom Request.
Step 8. CSR generation wizard
The CSR generation wizard will open > Click Next.
Step 9. Proceed without enrollment policy
Select the option to Proceed without enrollment policy > Click Next.
Step 10. Click Next at the PKCS # 10 window.
Step 11. Edit Properties
From the Details drop-down menu > Click Properties.
Step 12. Enter a Friendly Name
Step 13. Add the CSR contents:
Access the Subject tab > in the Subject name: select the types (Common name) from the dropdown list and add the values required for your CSR. Just add the multiple DNS values as shown here. Each DNS represents a domain name. Example: CN = <thesecmaster.com> DNS = <thecrypticworld.com> DNS = <example.com> DNS = <deals.com> DNS = <domain>
Step 14. Set Private Key settings
Click the Private Key tab > click the drop-down for Key options > select Key size: 2048 and check the option to Make private key exportable > Click OK.
Step 15. Save the CSR file to a location.
Select Base 64 and Click Next > Click Browse.
Step 16. Select a location to save the CSR file. Enter a name for the file and click Save.
Step 17. Click Finish.
Step 18. The CSR file will be present at the location you saved it and can be used to request the SSL certificate as needed.
If you ever try opening a CSR from using a text editor, you will see a base64 encoded text. You should need to decode it to read the content of the CSR. Either you can use OpenSSL or online tools to decode the CSR. We want to introduce one such wonderful tool for you.
Copy and paste the content of your CSR here in the box and click Decode. It not only decodes the CSR but also reports any errors if it has.
Namecheap: https://decoder.link/resultt
