step-1:openssl genrsa -out <private key file name> 2048 step-2:openssl req -new -key <private key file name> -out <csr file name>