How to Generate a Private Key and CSR from Command Line | Use the following command to generate a private key and certificate signing request (CSR): $ openssl req -new -newkey rsa:2048 -nodes -keyout server_private.key -out server_csr.csr In the dialog that follows, pay particular attention to the CommonName (CN) indication. If you need a certificate for example.com, use example.com (exactly) as the CN. For example, if you
Check key length from the command line with OpenSSL
Check key length from the command line with OpenSSL | To check the key length of a certificate, use the openssl command. Here is how to check an RSA private key length: $ openssl rsa -text -noout -in private.key The top of the output will have: Private-Key: (1024 bit) For a certificates (.crt or .pem), use this command: $ openssl x509 -text -noout -in certificate.crt
