Generating a CSR on Mac OS X Server (Yosemite/El Capitan)

Author:Vishal Singh
Updated:Jun 13, 2025

To generate a Certificate Signing Request (CSR) for Mac OS X Server (Yosemite or El Capitan), follow these steps:

  1. Open Keychain Access: Launch the Keychain Access application on your Mac.

  2. Create a New Certificate Request:

    • In the Keychain Access window, click on the "+" button.
    • Select "Get a trusted certificate" and click "Next".
  3. Fill in CSR Details:

    • Host Name: Enter the domain name you wish to secure (e.g., example.com or *.example.com for wildcard).
    • Contact Email Address: Provide an email for the administrator.
    • Company/Organization: Include your company name, or "NA" if none.
    • Department: Specify your department (e.g., IT) or "NA".
    • Location Details: Enter city, state, country, and other required geographical information.
  4. Avoid Special Characters: Refrain from using characters like ~, ,, etc., to prevent issues during activation.

  5. Generate CSR:

    • After filling in the details, click "Next" to generate the CSR.
    • Click "Save" to save the .csr file. Typically saved in a specific location on your server.
  6. Submit to CA: Use the generated CSR to apply for an SSL certificate from your Certificate Authority (e.g., Esadax).

  7. Verify Domain Control:

    • Ensure you have control over the domain by using a fully qualified domain name.
    • Avoid using "localhost" or "127.0.0.1" as these may not be recognized.
  8. Check Permissions: Confirm that your CA can access the requested domains and has the necessary permissions.