SSL server certificates can only be issued for servers of official RWTH Aachen institutions. The RWTH has to be the owner of:

• the IP address and/or 
• the Domain

The RSA key pair and the Certificate Signing Request do not have to be created directly on the server. They may be generated on a separate computer and then the necessary files can be transferred to server. In this case, an installation of OpenSSL on the server is not necessary!

There are two possibilities to apply for a server certificate

• using CSR (using Open SSL as an example)
• via key generation in a browser