Comment creer un CSR:

openssl genrsa -out www.mydomain.com.key 2048
openssl req -new -key www.mydomain.com.key -out www.mydomain.com.csr

openssl genrsa -out /etc/ssl/private.daemon/`hostname -f`.key` 2048
openssl req -new -key /etc/ssl/private.daemon/`hostname -f`.key` -out /etc/ssl/private.daemon/www.mydomain.com.csr

Le domaine est le "common name".

Pour lire un csr:

openssl req -text -noout -in hostcsr.pem

Pour lire un cert:
openssl x509 -text -noout -in hostcert.pem


Installation apache:

SSLEngine on
SSLCertificateFile       /etc/ssl/certs/your_domain_name.crt
SSLCertificateKeyFile    /etc/ssl/private//your_private.key
SSLCertificateChainFile  /etc/ssl/certs/DigiCertCA.crt