making CSR certificates in Windows (7)

You can install OpenSSL for windows and generate CSR file with this command:

openssl req -nodes -newkey rsa:2048 -keyout private_key.key -out cer_sign_request.csr

You'll be asked for a few questions which are optional (press ENTER).

This will generate a private key (such in keychain access) and a certification signing request as csr file.

For those who want an easy to use graphical interface, Digicert has a "Digicert Utility" that is pretty solid. You can use it to create a CSR. It doesnt give you back a private key, so you need to import your self signed or CA certificate to complete the installation of the certificate. Once installed, you can export it as a pfx or crt/key bundle.