Step 1: Create Your CSR in IIS 7 on Windows Server 2008

From the Windows Start menu, find Internet Information Services (IIS) Manager and open it (click Administrative Tools > Internet Information Services (IIS) Manager).

In the Connections pane, locate and click the server.

In the server Home page (center pane) under the IIS section, double-click Server Certificates.



In the Actions menu (right pane), click Create Certificate Request.



In the Request Certificate wizard, on the Distinguished Name Properties page, provide the information specified below and then click Next.

Common name: The fully-qualified domain name (FQDN) (e.g., www.example.com).
Organization: Your company’s legally registered name (e.g., YourCompany, Inc.).
Organizational unit: The name of your department within the organization. This entry will usually be listed as "IT", "Web Security", or is simply left blank.
City/locality: The city where your company is legally located.
State/province: The state/province where your company is legally located.
Country/region: The country/region where your company is legally located. Use the drop-down list to select your country.




On the Cryptographic Service Provider Properties page, provide the information specified below and then click Next.

Cryptographic service provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider (unless you have a specific cryptographic provider).
Bit length: In the drop-down list, select 2048 (unless you have a specific reason for using a larger bit length).



On the File Name page, under Specify a file name for the certificate request, click the … button to specify a save location for your CSR.

Note: Remember the filename and save location of your CSR file. If you enter a filename without specifying a location, your CSR will be saved to C:\Windows\System32.




When you are done, click Finish.

Open the CSR file using a text editor (such as Notepad), then copy the text (including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags) and paste it into the DigiCert order form.