inside the brain

I do this the odd time in work so I don’t have to remember the command but it gets really annoying trying to remember it when I do have to generate one.

openssl genrsa -out domainname.key 2048 (or whatever length you choose)

openssl req -new -key domainname.key -out domainname.csr

This will generate the private key without a password, now you have a nice shiny CSR to send someone.