How do I obtain a SSL certificate?

Only University faculty or staff members my request SSL certificates. To obtain a SSL certificate for your server, log in to the WebStore and select Unit Purchase (certificates are not available for Personal Purchase). Place an order for SSL InCommon Comodo Certificate.   We offer 1 and 3-year new requests and renewals.  

After you have purchased your SSL certificate from WebStore email the following to

  1. Fully qualified domain name of the server (example:
  2. Primary contact email address (must be a University of Illinois faculty/staff or department email address)
  3. Secure HTTP server vendor and version (example: Apache modssl 1.3.20,  Microsoft IIS 4.0)
  4. Certificate signing request (CSR) generated by your secure server. A CSR is an ASCII text file that you create that looks something like this:

Certificate Signing Request (CSR)

The certificate signing request (CSR) must be created from a 2048-bit or larger key pair. Check the Comodo Knowledgebase for your particular web server and instructions for generating a certificate signing request. At some point during the process you will be prompted to enter values for the following six fields that will be encoded in your certificate:

  • Common-name :
  • Organization : University of Illinois at Chicago
  • Organizational Unit : Department Name
  • Locality : Chicago
  • State : Illinois
  • Country : US

Enter the appropriate values for your server (Common-name) and department (Organizational Unit). All other fields should be entered exactly as shown (no abbreviations, punctuation, capitalization changes, extra spaces, etc.) If you are prompted for webmaster email address, phone number, or challenge phrase, enter any reasonable values. These three items are optional and not actually used to create your certificate. If during the process your server prompts you for a Certificate Authority, enter

Your server will either store the certificate request in a file or email it to (it will tell you which of these things it does). If it stored the request in a file, email the contents of that file to After your request is processed, you will receive an email from with directions on how to install the certificate. If you haven't received a response after three full business days since emailing your request, send a query to


CSR Generation: OpenSSL

Certificate Installation: Apache w/mod_ssl


CSR Generation: Microsoft IIS 5.x & 6.x

CSR Generation: Microsoft IIS 7.x

CSR Generation: Microsoft IIS 8.x


Certificate Installation: Microsoft IIS 5.x & 6.x

Certificate Installation: Microsoft IIS 7.x

Certificate Installation: Microsoft IIS 8.x

Need help?

Last updated: 

July 18, 2017

Browse by tag