Generate CSR with alt names

This example uses the agile.coop domain as an example.

As the root user. Create an OpenSSL config file, saved as agile.coop.conf

[ req ]
default_bits       = 2048
distinguished_name = req_distinguished_name
req_extensions     = v3_req
prompt             = no

[ req_distinguished_name ]
countryName         = GB
stateOrProvinceName = Oxon
localityName        = Oxford
organizationName    = Agile Collective
commonName          = agile.coop

[ req_ext ]
subjectAltName = @alt_names

[alt_names]
DNS.1 = www.agile.coop

Generate the private key and CSR.

openssl req -newkey rsa:2048 -keyout agile.coop.key -out agile.coop.csr -nodes -config agile.coop.conf

Verify the CSR.

openssl req -noout -text -in agile.coop.csr

Links