Can Let's Encrypt generate Certs for custom CSR

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: Paivi.biz

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Having recently generated a certificate with certbot, l have found the private key generated to be too weak for my liking. It simply does not meet our minimum expectation. I have tried specifying the key size in the certbot config "cli.ini" but the key generated was not to the specification in the config file.
Consequently, it has become necessary to generate the certificate using our custom generated key and CSR.

Hence, my question is how do we request a certificate using our custom CSR and private key?

If you want a different key type or size, you should be able to get what you want with --key-type to choose between RSA and ECDSA, and then either --rsa-key-size or --elliptic-curve to choose the parameters for it more specifically.

https://eff-certbot.readthedocs.io/en/stable/using.html#rsa-and-ecdsa-keys

You can use certbot's --csr if you just want certbot to handle the ACME client communication with your own custom CSR integration, but that's usually a lot harder to try to automate.

5 Likes

Thank you for your response. I have figured it out and we are now able to generate certs to our specifications. Panic over

4 Likes