How to Generate CSR For SSL on GoDaddy (2024)

Last updated on February 10th, 2024 at 12:39 am

To generate a Certificate Signing Request (CSR) for an SSL certificate on GoDaddy, you can follow the specific instructions for your server type. Below are the detailed steps for generating a CSR for NGINX, Apache, and cPanel hosting.

What is a certificate signing request (CSR) and why is it needed for SSL?

A Certificate Signing Request (CSR) is a crucial step in obtaining an SSL/TLS certificate for your website or online service.

It is an encoded file containing information about your website, service, organization, and domain name, as well as your public key and signature.

The CSR is generated on the same server where you plan to install the certificate, and it is used by a Certificate Authority (CA) to create your SSL/TLS certificate.

Here’s why a CSR is needed for SSL:

Identity verification: The CSR contains information about your website, service, organization, and domain name, which helps the CA verify your identity and ensure that you are the legitimate owner of the domain.
Public key: The CSR includes your public key, which is used to encrypt the information sent to and from your website. This key is signed with the private key on your server, ensuring the integrity of the key pair and the security of the communication.
Two-step process: The CSR is the first step in obtaining an SSL/TLS certificate. After generating the CSR, you submit it to the CA, which then uses the data from the CSR to build your SSL/TLS certificate.

To generate a CSR, you need to provide the following information:

Common name (e.g., www.example.com)
Organization name and location (country, state/province, city/town)
Key type (typically RSA)
Key size (2048-bit minimum)

The CSR generation process depends on the platform you’re using, such as cPanel, Exchange, IIS, Java Keytool, or OpenSSL.

Once you have generated the CSR, you can submit it to the CA to obtain your SSL/TLS certificate.

How to Generate CSR For SSL on GoDaddy

Now, learn how to generate CSR for SSL on GoDaddy with our step-by-step guide. Ensure secure data transmission and protect your website today!

NGINX: Generate CSR

Connect to your server via SSH.
Run the following command:

   openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

Replace “yourdomain” with your actual domain name.

Open the CSR in a text editor, copy all the text, and paste it into the SSL certificate-request page on your GoDaddy account.
Enter the requested information, including the Common Name, Organization, and City or Locality.

Apache: Generate CSR

Log in to your server’s terminal (SSH).
Type the following command:

   openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

Replace “yourdomain” with your actual domain name.

Open the CSR in a text editor, copy all the text, and paste it into the SSL enrollment form in your GoDaddy account.
Enter the requested information, such as the Common Name, Organization, and Organizational Unit.

cPanel Hosting: Generate CSR

Go to your GoDaddy product page and click on your Linux Hosting account.
In the cPanel, navigate to SSL/TLS and click on “Generate, view, or delete SSL certificate signing requests.”
Complete the fields in the “Generate a New Certificate Signing Request (CSR)” section, including Domains, City, State, Country, and Company.
Click the “Generate” button, and your CSR will be displayed in the Encoded Certificate Signing Request section.

After generating the CSR, you can then request your SSL certificate with the generated CSR by following the steps on your GoDaddy account.

Windows: Generate CSR

To generate a Certificate Signing Request (CSR) on a Windows system, you can use the Microsoft Management Console (MMC) with the Certificates snap-in. Here are the steps to generate a CSR using the MMC:

Open the MMC by pressing Win + R, typing mmc, and pressing Enter.
Click on “File” and then “Add/Remove Snap-in.”
In the list of available snap-ins, select “Certificates.”
Click “Add,” select “Computer account,” and click “Next.”
Select “Local computer” (the computer this console is running on) and click “Finish.”
In the “Add/Remove Snap-in” window, click “OK.”
Save these console settings for future use.
Access your MMC snap-in, right-click the “Personal” folder, and select “All Tasks” > “Advanced Operations” > “Create Custom Request.”

After completing these steps, you will have generated a CSR for your Windows system. You can then submit this CSR to a Certificate Authority (CA) to obtain your SSL/TLS certificate.

Alternatively, you can use the DigiCert Certificate Utility for Windows to generate a CSR.

This utility simplifies the process of creating a CSR on any Microsoft server platform.

To learn more about the DigiCert Certificate Utility, you can visit their website.

Remember to paste the full CSR into the appropriate field and enter the necessary details as requested.

These steps can help you successfully generate a CSR for your SSL certificate on GoDaddy, ensuring the secure transmission of data on your website.

How to rekey SSL on Godaddy

To rekey an SSL certificate on GoDaddy, follow these steps:

Log in to your GoDaddy account and navigate to the SSL Certificates section.
Find the SSL certificate you want to rekey and click on the “Manage” button.
In the certificate details page, look for the “Rekey Certificate” option and click on it.
You will be prompted to generate a new private key. Choose the option to generate a new key and provide the necessary information.
Once the new private key is generated, GoDaddy will provide you with a Certificate Signing Request (CSR). Copy the CSR or download it as a file.
Now, you need to submit the CSR to a Certificate Authority (CA) to obtain a new SSL certificate. You can either use GoDaddy as the CA or choose another trusted CA.
If you choose GoDaddy as the CA, follow the instructions provided to submit the CSR and complete the rekeying process. If you choose another CA, you will need to follow their specific process.

Note that rekeying an SSL certificate will invalidate the old certificate.

After the rekeying process is complete, your SSL certificate will be updated with the new private key and certificate.

If you have a Managed WordPress standalone SSL certificate, you can follow specific steps to rekey it, as outlined in the GoDaddy help article “Rekey my Managed WordPress standalone SSL certificate”.

Rekeying an SSL certificate is necessary in various scenarios, such as changing the domain name (common name) of your SSL, changing the SSL certificate’s issuing organization, server crashes, loss of the private key, or when moving your website to a new server.

Wrap!

To generate a CSR for an SSL certificate on GoDaddy, you can follow specific instructions for your server type, such as NGINX, Apache, or cPanel hosting.