Pro Active Directory Certificate Services: Creating and Managing Digital Certificates for Use in Microsoft Networks

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

L. E. HughesPro Active Directory Certificate Serviceshttps://doi.org/10.1007/978-1-4842-7486-6_6

6. PKCS #10 Certificate-Signing Request (CSR)

Lawrence E. Hughes¹  

(1)

Frisco, TX, USA

 

Now that you know what a digital certificate is, how do you request one from a Certification Authority?

First, the requester must create a public/private key pair (a public key and a corresponding private key). The private key is kept secret by the requester and is never submitted to the CA. The requester also creates a Subject Distinguished Name for the certificate owner.

Whether is it exposed or not, the requester creates a complex digital document called a Certificate-Signing ...