How do I create a CSR on my own Linux server?

# openssl genrsa -des3 -out domain.key 2048

Enter a password that is as long as possible. You must remember this password!

# openssl rsa -in domain.key -out domain.rsa.key

# openssl req -new -key domain.key -out domain.csr

Fill in carefully and refrain from umlauts and special characters. As common name, please enter the domain for which the certificate is to be used later, e.g. shop.domain.tld.

Enter pass phrase for domain.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:EN
State or Province Name (full name) [Some-State]:BW
Locality Name (eg, city) []:Karlsruhe
Organization Name (eg, company) []:Name of your company
Organizational Unit Name (eg, section) []:Department
Common Name (eg, YOUR name) []:domain.tld
Email Address []:webmaster@domain.tld
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Once all the information has been completed, you will find the CSR as text in the domain.csr file.