Using OpenSSL to generate a CSR and packaging the certs and private key in a .p12 file

openssl-csr-and-packaging.md

• generate an RSA key

  openssl genrsa -out domain_name.key 2048
  

• generate a certificate signing request (CSR) using the private key

  openssl req -new -sha256 -key domain_name.key -out domain_name.csr
  

• verify that public key in the certificate matches the private key

  openssl x509 -in domain_name.crt -noout -modulus | md5
  openssl rsa -in domain_name.key -noout -modulus | md5
  

• create a .p12 file with cert chain and private key

  cat *.crt | openssl pkcs12 -export -inkey domain_name.key -out domain_name.p12