Certificate Signing Request - Revision history

Jsummers: Moved PKCS10 info to a separate article

2014-01-25T01:41:43Z

Moved PKCS10 info to a separate article

Jsummers at 23:02, 30 October 2013

2013-10-30T23:02:36Z

Jsummers at 23:17, 22 October 2013

2013-10-22T23:17:15Z

Jsummers: Created page with "{{FormatInfo |formattype=electronic |subcat=Security |extensions={{ext|csr}}, {{ext|pem}} }} A '''Certificate Signing Request''' ('''CSR''') file contains a public key, along ..."

2013-10-22T22:47:29Z

Created page with "{{FormatInfo |formattype=electronic |subcat=Security |extensions={{ext|csr}}, {{ext|pem}} }} A '''Certificate Signing Request''' ('''CSR''') file contains a public key, along ..."

New page

{{FormatInfo
|formattype=electronic
|subcat=Security
|extensions={{ext|csr}}, {{ext|pem}}
}}
A '''Certificate Signing Request''' ('''CSR''') file contains a public key, along with some metadata which typically includes an organization name, domain name, etc.

A CSR file may be encoded in [[PEM]] format, [[DER]] format, or possibly some other format.

The CSR file is intended to be sent to a certificate authority, who can then (after performing any required validation of the sender's identity) generate and send back a signed [[X.509 certificate|certificate]]. Note that the certificate authority does not need to know the certificate's [[PEM encoded RSA private key|private key]].

== Identification ==
A PEM-encoded CSR file is plain text, with [[base64]]-encoded payload data. It contains a line that reads "<code>-----BEGIN CERTIFICATE REQUEST-----</code>" or "<code>-----BEGIN NEW CERTIFICATE REQUEST-----</code>".

== Examples ==
To view the contents of a PEM-encoded CSR file, using OpenSSL:
openssl req -noout -text -in example.csr

To generate a new CSR, first generate a [[PEM encoded RSA private key|private key]], then:
openssl req -new -key example.key -out example.csr

== Software ==
* [http://www.openssl.org/ OpenSSL]

@@ Line 2: / Line 2: @@
 |formattype=electronic
 |subcat=Security
-|extensions={{ext|csr}}, {{ext|pem}}, {{ext|p10}}
+|extensions={{ext|csr}}, others
-|mimetypes={{mimetype|application/pkcs10}}
 }}
-A '''Certificate Signing Request''' ('''CSR''') file contains a public key, along with some metadata which typically includes an organization name, domain name, etc.
+A '''Certificate Signing Request''' ('''CSR''') is a file that contains a public key, along with some metadata which typically includes an organization name, domain name, etc.
-A CSR file may be encoded in [[PEM]] format, [[DER]] format, or possibly some other format.
+A CSR file is intended to be sent to a certificate authority, who can then (after performing any required validation of the sender's identity) generate and send back a signed [[X.509 certificate|certificate]]. Note that the certificate authority does not need to know the certificate's [[RSA private key|private key]].
-The CSR file is intended to be sent to a certificate authority, who can then (after performing any required validation of the sender's identity) generate and send back a signed [[X.509 certificate|certificate]]. Note that the certificate authority does not need to know the certificate's [[RSA private key|private key]].
+The most common CSR format is [[PKCS10]].
-== Identification ==
+== CSR Formats ==
-A PEM-encoded CSR file is plain text, with [[base64]]-encoded payload data. It contains a line that reads "<code>-----BEGIN CERTIFICATE REQUEST-----</code>" or "<code>-----BEGIN NEW CERTIFICATE REQUEST-----</code>".
+* [[PKCS10]]
+* [[SPKAC]]
-== Examples ==
-To view the contents of a PEM-encoded CSR file, using OpenSSL:
-  openssl req -noout -text -in example.csr
-−
-To generate a new CSR, first generate a [[PEM encoded RSA private key|private key]], then:
-  openssl req -new -key example.key -out example.csr
-−
-== Specifications ==
-* RFC 2986: PKCS #10: Certification Request Syntax Specification, Version 1.7
-* RFC 2314: PKCS #10, Version 1.5 (obsolete)
-* RFC 5967: The application/pkcs10 Media Type
-−
-== Software ==
-* [http://www.openssl.org/ OpenSSL]
-* [http://www.gnutls.org/ GnuTLS]
 == Links ==
 * [[Wikipedia:Certificate signing request|Wikipedia: Certificate signing request]]