CSR
acronymcryptographysecurity
Stands for: Certificate Signing Request
A signed request containing the public key and details for a certificate.
A Certificate Signing Request (PKCS #10) bundles the public key and subject information, signed by the requester's private key, and is submitted to a CA to obtain a certificate. ACME automates what once meant pasting a CSR into a web form.
A certificate signing request bundles a public key and the identity being claimed, signed by the corresponding private key to prove possession. The private key never leaves the machine that generated it, which is the property that makes the whole arrangement safe.
The common mistakes are all about what is in it. Subject fields other than the name are largely ignored by public authorities, the names that matter go in the subject alternative name extension, and a request generated with the wrong key length or algorithm will be rejected after the delay of submitting it. Generating the request on the server that will use the certificate is standard practice precisely because it means nobody ever has to transmit the key.
Also known as: csr