Certificate Signing Request (CSR) Generation Instructions for MAC OS X 10.3

Solution ID:    SO22585    Updated:    07/24/2013


This document provides instructions for generating Certificate Signing Request for MAC OS X 10.3. If you are unable to use these instructions for your server, RapidSSL recommends that you contact Apple. 

NOTE: To generate a CSR, you will need to create a key pair for your server. These two items are a digital certificate key pair and cannot be separated. If you lose your public/private key file or your password and generate a new one, your SSL Certificate will no longer match.

Step1: Generate the Private Key

    1.    Log in to the server using the root password and open the Terminal application.

    2.    At the prompt, type these commands and press Return at the end of each one:


           openssl sha1* > rand.dat

           openssl genrsa -rand rand.dat -des 2048 > key.pem

    3.    At the next prompt, type a pass phrase, then press Return.
           NOTE: The pass phrase created unlocks the server's certificate key and
           will be used when enabling SSL on the web server.
    4.    If is doesn't already exist on the server, create a folder with the
           following name: /etc/httpd/ssl.key/

Step 2: Generate the CSR

    1.    At the prompt, type the following command and press Return: 

           openssl req -new -key key.pem -out csr.pem 
    2.    When prompted, enter the following information:

  • Country: Country where your organization is located. Two letter abbreviation
  • State: Type the full name of your state.
  • Locality: This is the city your organization is located.
  • Organizational Name: This is the organization that your domain name is registered under.
  • Organizational Unit: Department within organization.
  • Common Name of your web server:  A Fully Qualified Domain Name such as www.domain.com
  • Email Address:  Optional

    3.    To view the content of the CSR use the command: 

           cat csr.pem
    4.    Remember to back up the private key and the CSR to a removable disk in case of server problems.
    5.    Then open the CSR using a text editor, such as Notepad, and copy and paste the contents of the
           CSR into the appropriate text field when requesting a certificate.

    6.    Remember to include the five dashes before "Begin Certificate Request" and after
           "End Certificate Request".  

Once the certificate has been issued, refer to this link for installation instructions: SO22533


           For more information contact Apple Support.



RapidSSL has made efforts to ensure the accuracy and completeness of the information in this document. However, RapidSSL makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. RapidSSL assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document.  Further, RapidSSL assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. RapidSSL reserves the right to make changes to any information herein without further notice.

Contact Support

US Support:

Order Processing

Technical Support

European Support:

Order Processing

Technical Support

SSL digital certificates sales live chat.

Find Answers

Search Tips