What is a Certificate Signing Request (CSR)?

A certificate signing request (CSR) is a PEM file that's  kind of similar to an X.509 certificate, but it only contains the basic information that the Certificate Authority (CA) needs to sign a certificate for the client: subject names, the public key, requested extensions, and a signature. A CSR is signed using the private key. To get a signed certificate, first the client generates a private key, public key, and CSR. It sends the CSR to the CA along with whatever the CA needs to authenticate the request. If everything checks out, the CA sends back a certificate-and the client can delete the CSR, since it's no longer needed.

[@ajithmoni1712]

Amazing explanation simple clear

[@smallsteplabs]

Glad it was helpful!

[@MiguelSalinas26]

When the user has a private and public key created, then wants to create the CSR. What key is used to create the CSR?

[@smallsteplabs]

The CSR contains the public key and is signed by the private key.

[@SafSopNorLai]

Thank you dude.

[@smallsteplabs]

Happy to help

[@Intaderesting]

Intaderesting