Reference Guide › DXtools › DXcertgen Tool › dxcertgen certreq Command—Create a Certificate Signing Request (CSR)

dxcertgen certreq Command—Create a Certificate Signing Request (CSR)

If you want to use a certificate from another Certificate Authority (CA), you can use DXcertgen to create a Certificate Signing Request (CSR), which you can send to the authority.

This command creates a CSR and a private key. You do not send the private key to the CA.

If the request is successful, the CA will send back a certificate that has been digitally signed with the CA's private key. (You can then use this certificate by using the command dxcertgen certmerge.)

The command dxcertgen certreq stores the CSR in DXHOME/config/ssld/dsaname.csr, and stores the private key in DXHOME/config/ssld/dsaname.key.

The command has the following syntax:

dxcertgen [-D dsaname] certreq

• -D dsaname

  Specifies the DSA for which a CSR will be created. If you do not use this option, DXcertgen will create requests for all DSAs.