Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

A not so obvious prompt is Common Name (eg, YOUR Name). This value should not be your name. Instead it should be the base domain name of your website. In our example, it will would be earth.com. If you We prefer using the www in your our domain name, then choose so we use www.earth.com.

Note

Some CA such as StartSSL includes the base domain always in the Subject Alternative Name extension together with the chosen common name so both www.myrapham.com and myrapham.com will have ssl support.

Code Block
languagebash
titlePrompts from Running openssl req
linenumberstrue
collapsetrue
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CA
State or Province Name (full name) [Some-State]:Ontario
Locality Name (eg, city) []:Toronto
Organization Name (eg, company) [Internet Widgits Pty Ltd]:The Planet Earth Incorporated
Organizational Unit Name (eg, section) []:Earth Defence
Common Name (eg, YOUR name) []:www.earth.com
Email Address []:admin@earth.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

...

This step also includes various CA specific procedures to prove your identity.

You may also be prompted for a hostname underneath your domain. If you want to use both https://www.earth.com and https://earth.com then make sure both are listed here.

Download and Store Keys

The CA will use your public key in the CSR to sign (need details here).

...