How to generate a new Certificate Signing Request (CSR):

1. Generate a TLS private key if you don't have one:
   (KEEP DOMAIN.KEY SECRET!)
   openssl genrsa 4096 > domain.key
2. Generate a CSR for your the domains you want certs for:
   (replace "foo.com" with your domain)
   Linux:

       #change "/etc/ssl/openssl.cnf" as needed:
       #  Debian: /etc/ssl/openssl.cnf
       #  RHEL and CentOS: /etc/pki/tls/openssl.cnf
       #  Mac OSX: /System/Library/OpenSSL/openssl.cnf
   
       openssl req -new -sha256 -key domain.key -subj "/" \
         -reqexts SAN -config <(cat /etc/ssl/openssl.cnf \
         <(printf "\n[SAN]\nsubjectAltName=DNS:foo.com,DNS:www.foo.com"))
       

3. Copy and paste the CSR into the box below.