ECA-External Certificate Authority

Instructions for SHA-256 SSL Certificates

Generating a Certificate Signing Request (CSR)

The specifics of making a CSR and key generation are different for each situation. Your server may have a specific procedure or you may use a common tool (e.g. OpenSSL). The process that you follow for making a CSR may require you to enter data that is not indicated in the information above. (For example, you might be required to enter information for “State” or “Locale”.) If so, enter values that are correct. But be advised that we will issue the certificate as indicated above and without those values. This is dictated by the DoD ECA Certificate Policy Certificate Profiles.

When creating the CSR, you will need the following information:

After reading the instructions above:

Proceed to Step 2: Gather the required documents