Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

A Certificate Signing Requests (CSR) is required by ITS Security Operations Enterprise Security to get or renew an TSL certificate. There are numerous ways to create the CSR:

...

Country Name (2 letter code) [AU]: US
State or Province Name (full name) [Some-State]: Kentucky
Locality Name (eg, city): Louisville
Organization Name (eg, company) [Internet Widgits Pty Ltd]: University of Louisville
Organizational Unit Name (eg, section) []: Information Technology Services - Security Operations
Common Name (eg, YOUR name) []: abc.louisville.edu or subdomain: xyz.abc.louisville.edu a fully qualified domain name should go here.
Email Address []: can be left blank.

...

A challenge password []:
An optional company name []:

The fields fields email address, optional company name and  and challenge password can  can be left blank for a web server certificate.

...

Show CSR Signature Algorithm

Tips:

  1. Make sure to type out louisville.edu slowly and to proofread before sending it.

  2. You don't have to put information for the street address and postal code. See https://sectigo.com/resource-library/sectigo-to-remove-street-address-and-postal-code-from-certificates

  3. When saving the CSR, you can do so as .txt, .csr file extensions. When we open the file, we should be able to see the --------BEGINING MESSAGE and ---------ENDING MESSAGE.

  4. The key type must be RSA.

  5. The hashing algorithm must be sha256.

  6. When sending to us, let us know who the contact personnel will be for renewals and general information.

  7. There will be 90, 60, 30, 15, and 7 day certificate expiration notification emails to remind you about renewals.