Google App Engine: SSL Certificate CSR Creation

If you already have your SSL Certificate and just need to install it, see Google App Engine: SSL Certificate Installation.

Before you generate your certificate signing request for your Google App Engine, you should review the Google App Engine “SSL for a Custom Domain” documentation.

This CSR Creation instruction assumes that you have already read the Google documentation and completed the following steps:

• Created an App Engine project.

• Purchased a domain.

• Set up a Google Apps account.

• Added the App Engine application as a service of the Google Apps account.

• Added a subdomain URL in Google Apps for your App Engine application.

• Enabled SSL for the application.

DigiCert Certificates fulfill all of the Google App Engine certificate and key requirements:

• .pem encoded X.509 certificates and private key

• Unencrypted private keys

• Certificate files do not contain more than five certificates

• Private keys use RSA encryption

• 2048 bits key modulus

Google App Engine: Using the DigiCert Certificate Utility for CSR Creation

If you are looking for a simpler way to generate your Google App Engine certificate signing request (CSR) that works on any Microsoft server or workstation platform, you can use the DigiCert® Certificate Utility for Windows. For more information about this utility, see DigiCert® Certificate Utility for Windows.

After you use the utility to generate your CSR, you use it to install your SSL Certificate on your Windows server or workstation. Next, you use the utility to export your certificate in Apache compatible format. Finally, you use the Google Admin console to upload and configure the certificate.

Google App Engine: How to Create Your CSR with the DigiCert Certificate Utility

1. On your Windows server or workstation, download and save the DigiCert® Certificate Utility for Windows executable (DigiCertUtil.exe).

2. Run the DigiCert® Certificate Utility for Windows.

   Double-click DigiCertUtil.

3. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock), and then, click Create CSR.

   

4. On the Create CSR page, enter the following information:

   Certificate Type:	Select SSL.
   Common Name:	Enter the fully qualified domain name (i.e. www.example.com).
   	You may also enter the IP address.
   Subject Alternative Names:	If you are requesting a Multi-Domain (SAN) Certificate, enter any SANs that you want to include.
   	(e.g., www.example.com, www.example2.com, and www.example3.net)
   Organization:	Enter your company’s legally registered name (e.g., YourCompany, Inc.).
   Department:	(Optional) Enter the department within your organization that you want to appear on the SSL Certificate.
   City:	Enter the city where your company is legally located.
   State:	In the drop-down list, select the state where your company is legally located.
   	If your company is located outside the USA, you can enter the applicable name in the box.
   Country:	In the drop-down list, select the country where your company is legally located.
   Key Size:	In the drop-down list, select 2048.
   	For Google App Engine certificates, 2048 bits is the maximum allowed key modulus.
   Provider:	In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
   	unless you have a specific cryptographic provider.

   

5. Click Generate.

6. On DigiCert Certificate Utility for Windows® - Create CSR page, do one of the following, and then, click Close:

   Click Copy CSR.	Copies the certificate contents to the clipboard.
   	If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
   	If you forget and copy some other item, you still have access to the CSR, and you do not have to go back and recreate it.
   Click Save to File.	Saves the CSR as a .txt file to the Windows server or workstation.
   	We recommend that you use this option.

   

7. Use a text editor to open the file. Then, copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and enter it into the DigiCert order form.

   Note:     During your DigiCert SSL Certificate ordering process, make sure that you select OTHER when asked to Select Server Software. This option ensures that you receive all the required certificates for Google App Engine SSL Certificate Installation (Intermediate and SSL Certificates).

   

   Ready to Order Your Google App Engine SSL Certificate

   Buy Now Learn More

8. After you receive your SSL Certificate from DigiCert, you can install it.

   See Google App Engine: SSL Certificate Installation.