Create openssl certificate with SHA256 signature

1) Download OpenSSL  for windows 

2) Add  Bin  path to system path also copy openssl.conf file to c:/OpenSSL/  

3) run OpenSSL.exe file  

4) Run following command to run to create SHA256 with RSA encryption certificate 

A.      Generate SSL key file 

genrsa -out key_name.key 2048  ----  here 2048 is bit length for key 

** Please note that both these examples will not add a password to the key file. To do that you will need to add -des3 to the command. 

B.      Create a Certificate Signing Request (CSR) 

req -out Cert_file_name.csr -key key_name.key -new –sha256 

 i) You can check that your Certificate Signing Request (CSR) has the correct signature by running the following. 

req -in Cert_file_name.csr -noout –text 

It should display the following if the signature is correct. 

Signature Algorithm: sha256WithRSAEncryption