openssl req -new -newkey rsa:2048 -nodes -sha256 -out www.mydomain.com.sha256.csr -keyout www.mydomain.key This command creates a new private key with the length of 2048 bits and save it as "www.mydomain.key". The CSR is saved as "www.mydomain.com.sha256.csr.