Introduction

Securing your website with an SSL/TLS certificate is essential for protecting data transmitted over the internet. This guide will walk you through the process of generating a Certificate Signing Request (CSR) for your domain using Tomcat and KeyTool, which can then be submitted to Esadax.com for certificate activation.

Steps to Generate a CSR

1. Prepare Your Domain Information

Before starting, ensure you have the following information ready:

• Domain Name: The fully qualified domain name (FQDN) you want to secure.
• Common Name (CN): This is typically your domain name.
• Organization Name (O): Your company or organization's name.
• Street Address: Physical address of your organization.
• City, State, Country: Location information for your organization.
• Administrative Contact (Email): Email address used for administrative purposes.

2. Generate the Keystore and Private Key

1. Open KeyTool:

   • On Windows, you can find it in the Tomcat bin directory or download it separately.
   • On macOS, you can install it via Homebrew or download directly.

2. Create the Keystore and Private Key:

   keytool -genkey -alias tomcat -keyalg RSA -keystore your_keystore.jks -dname "CN=your_domain.com, O=Your Organization Name, L=Location, ST=State, C=Country"
   

   Replace your_domain.com with your actual domain name and other details as needed.

3. Generate the Private Key:

   keytool -genkey -alias tomcat -keyalg RSA -keystore your_keystore.jks
   

   This will prompt you to enter a password for the keystore and private key.

3. Generate the CSR

1. Use the Existing Keystore:

   keytool -certreq -alias tomcat -file your_csr.csr -keystore your_keystore.jks
   

2. Open the CSR File:

   • The CSR file (your_csr.csr) will be generated in the same directory.
   • Open it with a text editor to view the content.

4. Submit the CSR to Esadax.com

1. Log in to Esadax.com:

   • Navigate to the SSL/TLS section in your account dashboard.

2. Upload the CSR:

   • Click on "Generate New Certificate" or the relevant option.
   • Upload the generated your_csr.csr file and enter the requested information, including the Common Name (CN) and Administrative Contact email.

3. Activate the Certificate:

   • After submission, follow the activation instructions provided by Esadax.com to install your SSL/TLS certificate.

Additional Notes

• SANs (Subject Alternative Names): If you require SANs (e.g., multiple domains or IP addresses), include them in the dname field as DNS.1=example.com, IP.1=123.45.67.89.
• Placeholders: Replace placeholders like your_domain.com with your actual domain name.

Submitting Your CSR

When submitting your CSR to Esadax.com:

• Ensure the Common Name (CN) matches exactly how it is registered in your DNS records.
• Provide the correct administrative contact email for verification purposes.

Resources

• How to Install SSL/TLS on Tomcat: For detailed instructions, refer to Tomcat's official documentation or guides specific to your operating system.
• Esadax.com Support Center: Visit the support section for any issues related to CSR submission or certificate activation.

Conclusion