During SSL installation write common name to be domain.com do not add www to it.
replace bum.com with your domain
on /mnt create a folder with domain name(This is done to generate certificate easily after expiration)
[root@india bum.com]# openssl req -newkey rsa:2048 -nodes -keyout bum.com.key -out bum.com.csr
Generating a 2048 bit RSA private key
writing new private key to ‘bum.com.key’
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
Country Name (2 letter code) [GB]:IN
State or Province Name (full name) [Berkshire]:Jharkhand
Locality Name (eg, city) [Newbury]:ranchi
Organization Name (eg, company) [My Company Ltd]:internet
Organizational Unit Name (eg, section) :technology
Common Name (eg, your name or your server’s hostname) :bum.com
Email Address :firstname.lastname@example.org
Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password :
An optional company name :
[root@india bum.com]# ll
-rw-r–r– 1 root root 1054 Sep 6 11:15 bum.com.csr
-rw-r–r– 1 root root 1675 Sep 6 11:15 bum.com.key