SSL证书请求文件(CSR)生成指南 - F5 BIG-IP
重要注意事项 An Important Note Before You Start
By far the most common problem users have when going through this process is related to private keys. If you lose or cannot access a private key, you cannot use the certificate we issue to you and will need to request a free reissue. To ensure this never happens, we advise that a backup of the private key file is made and that a note is made of the password that is used to protect the export of the private key.
WoSign recommends that you contact the F5 BIG-IP vendor for additional information.
Generate a Certificate Signing Request
Create a new certificate signing request using the Configuration utility. If you do not know the terms used, see the Terms Defined section below.
In the navigation pane, click Proxies.
On the Proxies screen, click the Create SSL Certificate Request tab.
In the Key Information section, select a key length and key file name.
In the Certificate Information section, enter information for your company.
Click Generate Certificate Request.
In the SSL Certificate Request screen, start the process of obtaining a certificate from your Managed PKI for SSL pages. (Your administrator will provide you with this URL.)
The Common Name is the Host + Domain Name. It looks like "www.company.com" or "company.com". VeriSign certificates can only be used on Web servers using the Common Name specified during enrollment. For example, a certificate for the domain "domain.com" will receive a warning if accessing a site named "www.domain.com" or "secure.domain.com", because "www.domain.com" and "secure.domain.com" are different from "domain.com".
If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll.
The “Org Unit” field is the name of the department or organization unit making the request.
The Locality field is the city or town name, for example: Berkeley.
Do not abbreviate the state or province name, for example: California.
Use the two-letter code without punctuation for country, for example: CN.
测试CSR和把CSR发给WoSign, Start the certificate request process
生成CSR后，建议您自己测试一下生成的CSR文件是否正确，请点击 这里 测试您的CSR文件。请把测试成功的CSR文件发给WoSign即可。请一定不要再动您的服务器，等待证书的颁发。
To submit the CSR to WoSign for processing you should start the certificate enrollment process.