Install SSL Certification

1> Create Private Key
openssl genrsa -des3 -out server.key 2048
(make a note, the 1024 is no longer be used)

2> Create CSR (Certification Signing Request)
openssl req -new -key server.key -out server.csr

3> Remove the passphase
openssl rsa -in server.key -out server.key.insecure
mv server.key server.key.secure
mv server.key.insecure server.key

4> Request the SSL certification

5> Receive the SSL certification

6> Modify the mod_SSL to point the SSL private key, Intermdiate, and Certificate

7> Restart the apache



example of san.cnf

[root@wordpressord tls]# cat san.cnf
[ req ]
default_bits       = 2048
distinguished_name = req_distinguished_name
req_extensions     = req_ext
prompt = no
[ req_distinguished_name ]
countryName                 = US
stateOrProvinceName         = <STATE>
localityName               = <CITY>
organizationName           = <COMPANY>
commonName                 = <WEB NAME>
[ req_ext ]
subjectAltName = @alt_names
[alt_names]
DNS.1   = <NAME 1>

DNS.2   = <NAME 2>