How to create a CSR: a Certificate Signing Request for SSL
A Certificate Signing Request goes to the certificate authority; the private key stays under your control. Create a CSR in a hosting panel, with OpenSSL or online, then check the names and key match.