Hosting Certificates CSR

Check our resources and if you still can’t find what you’re looking for, give us a call.

Generating a Private Key and Certificate Signature Request (CSR) from your Web Server

Note: Prior to enrolling/reissuing/renewing a certificate, you must generate a minimum of 2048-bit Private Key and CSR pair from your web server.

Digital IDs make use of a technology called Public Key Cryptography, which uses Public and Private Key files. The Public Key, also known as a Certificate Signature Request (CSR), is the key that will be sent to thawte. The Public Key is generated on your server and validates the computer-specific information about your web server and Organization when you request a Certificate from thawte.

The Private Key will remain on the server and should never be released into the public. Thawte does not have access to your Private Key. It is generated locally on your server and is never transmitted to thawte. The integrity of your Digital ID depends on your Private Key being controlled exclusively by you.

A CSR can not be generated without generating a Private Key file. Similarly, the Private Key file can not be generated without generating a CSR file. In certain web server software platforms like Microsoft IIS, both are generated simultaneously through the Wizard on the webserver.

Typically, you will be prompted to enter the following information about your Organization in order to generate the Private Key and CSR (Public Key) pair from the webserver:

  • Organization Name
  • Organizational Unit
    This maybe either a Sole Proprietorship, Trading As, University Department, University Administration, Government Department, Doing Business As, University Faculty, Public (Listed) Company, Private (Unlisted) Company, Registered Non-Profit Organization, Non-Government Organization, Interest Group, Registered Charity.
  • Country Code
  • State or Province
  • Locality
  • Common Name
    This is the name that distinguishes the Certificate best and ties it to your Organization. Here you need to enter your exact host and domain name that you wish to secure. This may also be the root server or intranet name for your Organization.


If you wish to secure, then you need to enter as the Common Name. If you just enter as the Common Name (without the host www), then the Certificate will only get issued to If you generate the CSR for, it will be valid for both and Similarly, if you need to secure, then you need to mention the Common Name as

If you are buying a Wildcard Server Certificate for securing all sub-domains of your domain name, then you need to enter the Common Name as *; otherwise, you will get an error while submitting your CSR.

You need to get in touch with your Web Hosting provider and request them to generate a CSR for your business after supplying them with the above-mentioned information. If you have bought Web Hosting for this domain name with Register4less, then you may generate a CSR yourself from your own Control Panel.


Shared Hosting
Dedicated Hosting
Email Hosting


About Us
Terms of Service
Our Blog
Site Map

Copyright © 1998 – 2020, the non-evil domain registration and web hosting company!
Your source for safe and secure Domain Registry and Web Hosting services!