Let’s create your SSl Certificate

> openssl req -x509 -nodes -days 500 -newkey rsa:2048 -keyout wildlife.key -out wildlife.crt
> openssl req -new -newkey rsa:2048 -nodes -keyout wildlife.key -out wildlife.csr
Sample certificate generation command execution
> openssl pkcs7 -print_certs -in Base64.p7b -out wildlife.crt
> openssl pkcs12 -export -in wildlife.crt -inkey wildlife.key -name "wso2carbon" -out wildlife.pfx
> keytool -importkeystore -srckeystore wildlife.pfx -srcstoretype pkcs12 -destkeystore wso2carbon.jks -deststoretype JKS
Generating the key store
> keytool -export -alias wso2carbon -keystore wso2carbon.jks -file wildlife.pem
> keytool -import -alias wso2carbon -file wildlife.pem -keystore client-truststore.jksEnter keystore password: wso2carbon
Trust this certificate? [no]: yes
Generation of the client trust-store
All the certificate files generated from above commands
> openssl x509 -in wildlife.crt -text -noout
> openssl rsa -in wildlife.key -check
> openssl req -text -noout -verify -in wildlife.csr
> openssl x509 -noout -modulus -in wildlife.crt| openssl md5
> openssl rsa -noout -modulus -in wildlife.key| openssl md5
> keytool -list -v -keystore wso2carbon.jks
> openssl pkcs12 -export -in wildlife.crt -inkey wildlife.key -out hostname.p12
> openssl pkcs12 -in wildlife.p12 -nodes -out wildlife.pem

How Can you install a SSL Certificate?

  1. Host your website with a dedicated IP address
  2. Buy a certificate
  3. Activate the certificate
  4. Install the certificate
  5. Update your site to use HTTPS
https secured website



Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Danuka Praneeth

Danuka Praneeth

Senior Software Engineer | BSc (Hons) Engineering | CIMA | Autodidact | Knowledge-Seeker