Key

The key alias of the key to generate the CSR for.

Signature Algorithm

The signature algorithm to use when creating the signature in the CSR (proof-of-possession).

By default, the signature algorithms can be selected from a drop-down list listing common algorithms. Note that some of these algorithms might not be supported by the crypto token used.

To specify a signature algorithm manually, click >.

Note that the algorithm must work with the key algorithm used (i.e. RSA or ECDSA).

Examples:

• SHA256withRSA

• SHA256withECDSA

DN

Subject DN to include in the CSR.

Certification Authorities might or might not use this information when creating the certificate.

Example:

• CN=My PDF Signer,O=PrimeKey Solutions,C=SE

Result

After clicking the Generate button, this column shows a button for each worker to download the generated CSR file.

Standard CSR

Creates a normal PKCS#10 certificate signing request.

CSR signed by worker

Create a PKCS#10 certificate signing request that is encapsulated in a PKCS#7/CMS SignedData structure.

If selected, use the drop-down list to select the CMS signer that will sign the request.

Generate

Performs the CSR generation for each selected key.

The Result column will provide a download button for each CSR generated.

Cancel

Returns to the previous page.