openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr
Replace domain with your domain. domain.csr
is what is used by your certificate authority to
generate your certificate. domain.key
will be used by your web server in conjunction with your
certificate.