The main differences are Rather than serializing the subject and using the RawSubject field, add the email address field to the pkixName ExtraNames slice (added in Go 15) The email address needs to be encoded as an ASN1 IA5String, not as a PrintableString or UTF8String This is why we need to use asn1RawValueCertificate Signing Request (CSR) Generation Nortel SSL Accelerator To generate a CSR, you will need to create a key pair for your server These two items are a digital certificate key pair and cannot be separated If you lose your public/private key file or your password and generate a new one, your SSL Certificate will no longer matchDuring SSL setup, if you're on a Windowsbased system, there may be times when you need to generate your Certificate Signing Request (CSR) and Private key outside the Windows keystore This may be useful, for example, if you want to backup your How To Generate A Csr Certificate Signing Request In Linux Csr ssl example
