Author Topic: Code Signing Certification (SSL) FAQs  (Read 13 times)

Offline certforumz

  • Cert Exams
  • Administrator
  • Hero Member
  • *****
  • Posts: 849
  • Ask me a question ...
    • CertExams - CCNA, A+, Network+, and Others
Code Signing Certification (SSL) FAQs
« on: December 04, 2018, 06:03:27 AM »
Came across several doubts while I was getting Code Signing SSL for our software product. A few commonly asked questions and answers are given below:

What is CSR (Certificate Signing Request)?

A CSR or Certificate Signing request is a block of encoded text that is given to a Certificate Authority when applying for an SSL Certificate. It is usually generated on the server where the certificate will be installed and contains information that will be included in the certificate such as the organization name, common name (domain name), locality, and country. It also contains the public key that will be included in the certificate. A private key is usually created at the same time that you create the CSR, making a key pair. A CSR is generally encoded using ASN.1 according to the PKCS #10 specification.
A certificate authority will use a CSR to create your SSL certificate, but it does not need your private key. You need to keep your private key secret. The certificate created with a particular CSR will only work with the private key that was generated with it. So if you lose the private key, the certificate will no longer work.
What is contained in a CSR?
Name
Explanation
Examples
Common Name
The fully qualified domain name (FQDN) of your server. This must match exactly what you type in your web browser or you will receive a name mismatch error.
*.google.com
mail.google.com
Organization
The legal name of your organization. This should not be abbreviated and should include suffixes such as Inc, Corp, or LLC.
Google Inc.
Organizational Unit
The division of your organization handling the certificate.
Information Technology
IT Department
City/Locality
The city where your organization is located.
Mountain View
State/County/Region
The state/region where your organization is located. This shouldn't be abbreviated: California
Country: The two-letter ISO code for the country where your organization is location: US
GB
Email address (An email address used to contact your organization): webmaster@google.com
Public Key:The public key that will go into the certificate.

The public key is created automatically

What does a CSR look like?
Most CSRs are created in the Base-64 encoded PEM format. This format includes the "-----BEGIN CERTIFICATE REQUEST-----" and "-----END CERTIFICATE REQUEST-----" lines at the begining and end of the CSR. A PEM format CSR can be opened in a text editor and looks like the following example:
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

IMPORTANT: For Code signing certificate, the Common Name would be your organizations name. Example,
CN = Anand Software and Training Pvt. Ltd.
O = Anand Software and Training Pvt. Ltd.
Both CN and O are exactly same as may seen in the above example.

https://knowledge.digicert.com/solution/SO7239.html
https://www.sslshopper.com/what-is-a-csr-certificate-signing-request.html