Create configuration file
Create a configuration file named example.nebraska.edu.cnf with the following content:
###################################
[req]
default_bits = 4096
default_md = sha256
string_mask = utf8only
prompt = no
encrypt_key = no
distinguished_name = req_distinguished_name
[ req_distinguished_name ]
C = US
ST = Nebraska
L = Lincoln/Omaha/Kearney
O = University of Nebraska-Lincoln/Omaha/Kearney
CN = example.nebraska.edu
emailAddress = email_for_notifications@nebraska.edu
[req_ext]
subjectAltName = @req_san
[req_san]
DNS.1 = example1.nebraska.edu
DNS.2 = example2.nebraska.edu
###################################
Observations
- In the field 'L' , Locality, use your campus: Lincoln, Omaha, Kearney. For nebraska.edu domains, use Lincoln.
- In the field 'O', Organization Name, use your campus name: University of Nebraska-Lincoln, University of Nebraska-Omaha, University of Nebraska-Kearney, or University of Nebraska.
Generate CSR and key via OpenSSL
Execute the following command:
openssl req -new -config example.nebraska.edu.cnf -reqexts req_ext -newkey rsa:4096 -days 398 -keyout example.nebraska.edu.key -out example.nebraska.edu.csr
The CSR file is example.nebraska.edu.csr.
Now you can create a ticket and submit the generated CSR.