The command GENERATE CERTIFICATE REQUEST can generate CSR certificates. This command uses key pairs commonly generated with the command GENERATE ENCRYPTION KEYPAIR, as showcased in this Tech Tip.

Certificate authorities can demand CSR certificates of different lengths.

The command GENERATE CERTIFICATE REQUEST does not have a length parameter. However, the command GENERATE ENCRYPTION KEYPAIR does have an optional length parameter that sets the size of the generated keys.

length Integer → Key length (bits) [512...2048] Default value = 512


Because the private key is passed later as an argument to the GENERATE CERTIFICATE REQUEST, changing the length of the key will also change that of the CSR.

Simply change the length of the encryption key pair, and you will obtain a CSR accordingly.