You will first want to complete the request and then export the key (instructions below). On Windows (IIS), the OS manages your CSRs for you. For OpenSSL, you can run the command openssl version –a to find the folder where your key files would be saved (/usr/local/ssl by default). When you generated the key pair, you saved two files: one that contains the public key and one that contains the private key. If you have not yet installed your certificate, then the most likely location of your private key is on the computer or server where you generated the key pair and CSR. Even if you don’t believe the site is transacting sensitive information, any exposure of the private key requires revocation of all corresponding certificates. We’ve seen an increase in instances where CAs have had to revoke certificates because admins have posted the keys to an online repository, like GitHub. In fact, no one outside of your administrators should ever be given access to this material.

The certificate authority (CA) providing your certificate (such as DigiCert) does not create or have your private key. A private key is created by you - the certificate owner - when you request your certificate with a Certificate Signing Request (CSR).

The private key is a separate file that’s used in the encryption/decryption of data sent between your server and the connecting clients. What is a private key?Īll TLS certificates require a private key to work. We’ll cover the most common operating systems below, but first, let’s explain some basics about private keys. This post will help you locate your private key the steps to do so vary by web server OS. Sometimes tracking and managing these certificates and corresponding key material can be difficult, leading to time spent hunting down the path where these items reside. Many touch their key material once a year or so - whenever they need to change certificates. Although validity periods on certificates have shortened, most IT professionals don’t frequently touch their TLS/SSL certificate configuration daily.

Primatte key