.png&w=3840&q=75)
Websites & Hosting4 min
How to Generate a CSR (Certificate Signing Request)
NS
NameSilo Staff8/19/2026
Share
A Certificate Signing Request (CSR) is an encrypted block of text generated on the server where your website is hosted. It contains your domain name and organization details, and is required by Certificate Authorities to issue your SSL. To generate a CSR, log into cPanel, navigate to the SSL/TLS manager, and fill out the CSR generation form.
What Is a CSR, and Why the Private Key Pairing Matters
A CSR is generated alongside a matching private key. The two are mathematically linked: the CSR contains the public half of that pairing, sent to a Certificate Authority (CA) to prove you control the domain and request a signed certificate.
The private key never leaves your server. The certificate the CA eventually issues will only work when installed alongside that exact matching private key. If the key is lost or regenerated after the CSR was submitted, the certificate becomes permanently unusable, no exceptions.
Why It Matters: Cryptography Tied to Your Exact Server
A CSR isn't a generic form field; it's cryptographically bound to the private key generated on that specific server at that specific moment. This is what makes SSL trustworthy: the CA is signing a request that can only be fulfilled by the server that generated it.
Generate the CSR anywhere other than the server where the certificate will install, and you create a mismatch that breaks installation entirely.
Implementation Steps: Generating in cPanel
Step 1: Generate the private key Log into cPanel → Security → SSL/TLS. Under Private Keys (KEY), click "Generate, view, upload, or delete your private keys." Set Key Size to 2048-bit, add a description (your domain name works well), and click Generate.
Step 2: Start the CSR Return to SSL/TLS → Certificate Signing Requests (CSR) → "Generate, view, or delete SSL certificate signing requests."
Step 3: Select the matching key The form defaults to generating a new 2048-bit key. If you already created one in Step 1, select it from the dropdown instead so the CSR pairs with that exact key.
Step 4: Fill in the details accurately
- Domains: The exact FQDN being secured (use *.yourdomain.com for wildcard certificates)
- Company: Your legally registered business name
- City, State, Country: Full names, no abbreviations
- Email: A valid contact address
Use alphanumeric characters only; special symbols in these fields commonly cause CA rejection.
Step 5: Generate and copy. Click Generate. The CSR output appears in a text box.
Decoding the Output
Your CSR will look like this:
-----BEGIN CERTIFICATE REQUEST-----MIICvDCCAaQCAQAwdzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx...-----END CERTIFICATE REQUEST-----Copy the entire block, including both marker lines. This is what you paste into your Certificate Authority's order form. It looks unreadable because it's Base64-encoded binary data, not meant to be read directly, only decoded by the CA's systems.
Common Mistakes
Generating the CSR on your local computer instead of the web server: A CSR created via a desktop tool or a different machine produces a private key that never touches your actual hosting server. Even if the certificate installs, it won't match, and the site throws SSL errors.
Losing the private key after submitting the CSR: cPanel stores the key on the server automatically, but migrations, account resets, or hosting changes can wipe it. Export a backup immediately and store it securely. Without it, a freshly issued certificate is completely useless.
Regenerating the key before the certificate arrives: Creating a new private key after submitting the CSR invalidates the pairing. Wait until the certificate is issued and installed before touching the key again.
What This Means for You
Once your CSR is generated, submit it through NameSilo's SSL dashboard to trigger certificate issuance. NameSilo Hosting includes full cPanel access for generating and managing CSRs directly on your server.
Frequently Asked Questions
What is a CSR for an SSL certificate?
An encoded request containing your domain and organization details for a CA.
How do I get a CSR for my domain?
Generate it in cPanel's SSL/TLS manager, on the server hosting your site.
What happens if I lose my private key?
The issued certificate becomes unusable and cannot be installed.
Do I generate a CSR at my host or registrar?
At your host, since it must be generated on the actual web server.
What is a 2048-bit RSA key?
The current industry-standard key length, balancing security and performance.
Can I use the same CSR for a renewal?
Best practice is generating a new key and CSR for every certificate.
What information goes into a CSR?
Domain name, company, city, state, country, and a contact email.
How do I install an SSL at NameSilo?
Submit your CSR through the SSL dashboard after purchase to begin issuance.
.png&w=2048&q=75)
NameSilo StaffThe NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
More articleswritten by NameSilo
.png&w=3840&q=75)
.png&w=3840&q=75)