Generate a Certificate Signing Request (CSR)

Lotus Domino Go 4.6.2.6 and higher

Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the "close" button below to close this window and continue to the next step.

1. Start the MKKF utility by typing mkkf at the command prompt. The system displays a menu page.
   
   *Note: The MKKF utility places the keyring file in the current directory unless otherwise specified.

2. Select N to create a new key ring file, default file name is keyfile.kyr.
   After you type in a key ring file name, the next menu screen will come up.
   
   
3. Select W to work with keys and certificates.
   
   

4. Select C to create a new key and certificate request. Type a password when prompted.

   Warning:If you lose the password, you must purchase another certificate.

   See the certificate replacement policy at the bottom of these instructions.

5. Select P to choose PKCS#10 certificate request format at the next menu.

6. Select M to modify the certificate request fields at the next menu.
   The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?&amp;.

   Distinguished Name Field	Explanation	Example
   Country Name	The two-letter ISO abbreviation for your country.	US = United States
   State or Province Name	The state or province where your organization is located. Can not be abbreviated.	Georgia
   City or Locality	The city where your organization is located.	Atlanta
   Organization Name	The exact legal name of your organization. Do not abbreviate.	GeoTrust Inc.
   Organizational Unit	Optional for additional organizational information.	Marketing
   Common Name (Server Host Name)	The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.	If you intend to secure the URL https://secure.geotrust.com, then your CSR's server hostname must be secure.geotrust.com
   Server Admin.'s email address	Your email address	abc@geotrust.com

7. Select R to create the key and certificate request after specifing all fields.

8. After the key and certificate request are created,select X to exit from MKKF utility. Save the changes to the key-ring file.
   
   *Make a backup copy of your keyring file and store it in a safe place.

9. Submit your CSR to GeoTrust by clicking on <Continue>, you will be asked to complete the agreement and the enrollment form as well

Certificate Replacement Policy

GeoTrust will replace, revoke, and refund certificates that have been issued within seven (7) days of the certificate issue date. If you need a new certificate after seven days, you will be responsible for purchasing a new server certificate.