Gere's the command I used to generate the CSR. It is really one line, even though your message display program may cause it to wrap midway: openssl req -nodes -newkey rsa:2048 -sha1 -keyout myserver.key -out server.csr