第一步：安装 OpenSSL 运行环境
首先确保本地拥有 OpenSSL 运行环境，可参考 《OpenSSL 安装教程》
第二步：使用 OpenSSL 生成 CSR
首先我们新建一个配置文件，复制以下内容到记事本保存为 SSLCity.cnf
[req]
prompt = no
distinguished_name = SSLCity
req_extensions = ext
[SSLCity]
CN = www.ssl.city # 域名
O = 中企云科技术有限公司 # 主体
OU = 技术部 # 部门
ST = 湖北 # 省份
L = 武汉 # 城市
C = CN # 国家编码
[ext]
subjectAltName = DNS:www.ssl.city # 域名
将红色标记内容替换为申请主体信息
OpenSSL 创建 CSR 教程
我们打开命令提示符输入以下命令
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha256 -newkey rsa:2048 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
参数数值 参数说明
D:\SSL\SSLCity.cnf CNF文件载入路径
D:\SSL\SSLCity.key KEY输出路径
D:\SSL\SSLCity.csr CSR输出路径
接下来我们可以将 D:\SSL\ 目录下的 SSLCity.csr 发送给我们即可，并且保存好 SSLCity.key 文件。CSR和Key 一一对应无法找回。
完整操作如下图：
OpenSSL 创建 CSR 教程
第三步：CSR 常见属性说明
加密算法：RSA；哈希算法：SHA256；加密位数：2048
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha256 -newkey rsa:2048 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA256；加密位数：4096
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha256 -newkey rsa:4096 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA256；加密位数：8192
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha256 -newkey rsa:8192 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA384；加密位数：2048
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha384 -newkey rsa:2048 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA384；加密位数：4096
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha384 -newkey rsa:4096 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA384；加密位数：8192
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha384 -newkey rsa:8192 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA512；加密位数：2048
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha512 -newkey rsa:2048 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA512；加密位数：4096
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha512 -newkey rsa:4096 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：RSA；哈希算法：SHA512；加密位数：8192
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -sha512 -newkey rsa:8192 -nodes -keyout D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr
加密算法：ECC；哈希算法：SHA256；加密位数：Prime256v1
openssl ecparam -out D:\SSL\SSLCity.key -name prime256v1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha256
加密算法：ECC；哈希算法：SHA384；加密位数：Prime256v1
openssl ecparam -out D:\SSL\SSLCity.key -name prime256v1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha384
加密算法：ECC；哈希算法：SHA512；加密位数：Prime256v1
openssl ecparam -out D:\SSL\SSLCity.key -name prime256v1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha512
加密算法：ECC；哈希算法：SHA256；加密位数：Secp384r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp384r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha256
加密算法：ECC；哈希算法：SHA384；加密位数：Secp384r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp384r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha384
加密算法：ECC；哈希算法：SHA512；加密位数：Secp384r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp384r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha512
加密算法：ECC；哈希算法：SHA256；加密位数：Secp521r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp521r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha256
加密算法：ECC；哈希算法：SHA384；加密位数：Secp521r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp521r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key -out D:\SSL\SSLCity.csr -sha384
加密算法：ECC；哈希算法：SHA512；加密位数：Secp521r1
openssl ecparam -out D:\SSL\SSLCity.key -name secp521r1 -genkey
openssl req -new -utf8 -nameopt multiline,utf8 -config D:\SSL\SSLCity.cnf -key D:\SSL\SSLCity.key