Available in Classic and VPC
NAVER Cloud's Enterprise Certificate creates certificates using the latest validated organization information in the Organizations menu, regardless of the organization information (O, L, ST, etc.) in the certificate signing request (CSR) you submit. This allows you to create a CSR without the hassle of matching all the details.
You must provide a CSR when issuing or reissuing an Advanced DV/OV certificate. This document explains how to create a CSR using OpenSSL.
CSR definition
To obtain an SSL/TLS certificate, you need a certificate signing request (CSR) file. A CSR is a file that contains the public key and owner information to be included in the certificate.
1. CSR and certificate information sources
To ensure information integrity and accuracy, Enterprise Certificate uses the following sources for certificate information:
- Technical specifications (public key and algorithm): Extracted from the CSR file you submit.
- Domain information (CN/SAN): Taken from the domains you enter when requesting the certificate and confirm through domain control validation (DCV).
- Organization information (organization name, address, etc.): Taken from official information validated in advance in the Organizations menu.
Because each information field has a designated source, you do not need to enter exact domain or organization information in the CSR. This allows certificates to be issued quickly without rejection due to input errors.
2. Create a CSR
Use the simplified command below to create a CSR for either a DV or an OV certificate. Regardless of the organization information entered in the CSR, the final certificate includes the validated official information.
Enter the following command on a single line in a terminal or command prompt and run it. This will create a private key file (example.com.key) and a CSR file (example.com.csr).
openssl req -new -newkey rsa:2048 -nodes -keyout example.com.key -out example.com.csr -subj "/CN=example.com"
- Replace example.com in CN=example.com with the actual domain where you will use the certificate.
As described under certificate information sources above, this value is automatically replaced with validated domain information when the certificate is issued. However, we recommend entering the actual domain name for smooth command execution and easier file identification.
- Other information: Details such as Country (C), State (ST), Locality (L), and Organization (O) can be omitted or set to arbitrary values. They are automatically set to pre-validated information during issuance.
- new: Creates a new CSR.
- newkey rsa:2048: Creates a new 2048-bit RSA private key.
- nodes: Does not encrypt the created private key.
- keyout example.com.key: Sets the file name for the created private key.
The private key file must never be exposed externally. You must handle it with care and reissue the certificate if the file is leaked or lost.
- out example.com.csr: Sets the file name for the created CSR.
- subj "/CN=example.com": Specifies the domain information (CN) to include in the CSR.
3. Enter the generated CSR
- Open the created .csr file in a text editor.
- Copy the content from
-----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----and paste it into the CSR input field in the "Enter CSR" step.