# Create CSR (Certificate Sign Request)

Create CSR config file
```bash
export fqdn="project.customer.com"
vi ${fqdn}.csr.conf
```

content
```ini
[ req ]
default_bits       = 2048
default_md         = sha256
prompt             = no
encrypt_key        = no
distinguished_name = dn
req_extensions     = req_ext

[ dn ]
C  = country-abbreviation
ST = project
L  = location
O  = org
OU = org-unit
CN = project.customer.com

[ req_ext ]
subjectAltName = @alt_names

[ alt_names ]
DNS.1 =     www.project.customer.com
DNS.2 =     stg-project.customer.com
DNS.3 = www.stg-project.customer.com
```

Generate CSR
```bash
export fqdn="project.customer.com"
openssl req \
    -new \
    -newkey rsa:4096 \
    -nodes \
    -config ${fqdn}.csr.conf \
    -keyout ${fqdn}.key \
    -out    ${fqdn}.csr
```



Verify CSR
```bash
openssl req \
    -in ${fqdn}.csr \
    -noout \
    -text
```