Create configuration file

Create a configuration file named example.nebraska.edu.cnf with the following content:

###################################
[req]
default_bits = 4096
default_md   = sha256
string_mask  = utf8only
prompt       = no
encrypt_key  = no
distinguished_name = req_distinguished_name

[ req_distinguished_name ]
C = US
ST = Nebraska
L = Lincoln/Omaha/Kearney
O = University of Nebraska-Lincoln/Omaha/Kearney
CN = example.nebraska.edu
emailAddress = email_for_notifications@nebraska.edu

[req_ext]
subjectAltName = @req_san

[req_san]
DNS.1 = example1.nebraska.edu
DNS.2 = example2.nebraska.edu
###################################

Observations

• In the field 'L' , Locality, use your campus: Lincoln, Omaha, Kearney. For nebraska.edu domains, use Lincoln.
• In the field 'O', Organization Name, use your campus name: University of Nebraska-Lincoln, University of Nebraska-Omaha, University of Nebraska-Kearney, or University of Nebraska.

Generate CSR and key via OpenSSL

Execute the following command:

openssl req -new -config example.nebraska.edu.cnf -reqexts req_ext -newkey rsa:4096 -days 398 -keyout example.nebraska.edu.key -out example.nebraska.edu.csr

The CSR file is example.nebraska.edu.csr.

Now you can create a ticket and submit the generated CSR.