Certificate Services Support

Certificate Signing Request (CSR) Help
Using Java Keytool
For Oracle Weblogic

There is a video for this solution.


Complete the following steps to create your CSR.

1. Before you can create your CSR, you need to create your Java keystore. Your Java keystore contains your private key.

Run the following command to create your 2048 bit Java keystore:

keytool -genkey -alias myalias -keyalg RSA –keysize 2048 -keystore c:\yoursite.keystore

2. Note the alias you use here to create the keystore. You will need to use the same alias later when you install your certificate.

Please note: the below example applies to Entrust Certificate Services customers with the intended purpose of using an SSL/TLS certificate purchased from Entrust Datacard.

3. You will be prompted to enter your DN information for your CSR. When it asks for your first and last name, make sure you enter the FQDN of your site. Here is an example:

What is your first and last name?
  [Unknown]:  www.entrust.com
What is the name of your organizational unit?
  [Unknown]:  IT
What is the name of your organization?
  [Unknown]:  Entrust Inc
What is the name of your City or Locality?
  [Unknown]:  Ottawa
What is the name of your State or Province?
  [Unknown]:  Ontario
What is the two-letter country code for this unit?
  [Unknown]:  CA
Is CN=www.entrust.com, OU=IT, O=Entrust Inc, L=Ottawa, ST=Ontario, C=CA correct?

  [no]:  yes

4. To create your CSR, run the following command:

keytool -certreq -keyalg RSA -alias myalias -file certreq.txt -keystore c:\yoursite.mykeystore

5. To find your CSR, enter the command:

type certreq.txt

Your SSL/TLS Certificate should now be installed. If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance.

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.