SAP Knowledge Base Article - Public

2892001 - What is a CSR - Recruiting Marketing

Symptom

What is a CSR?

Environment

SAP SuccessFactors Recruiting Marketing

Resolution

IMPORTANT NOTE: Since November 19th 2021 customers have to use the new SSL Certificate tab in Career Site Builder to renew their SSL Certificates. As a result, Product Support is no longer part of the certificate renewal process.

What is a CSR? A CSR or Certificate Signing request is a block of encoded text that is given to a Certificate Authority when applying for an SSL Certificate. It is usually generated on the server where the certificate will be installed and contains information that will be included in the certificate such as the organization name, common name (domain name), locality, and country. It also contains the public key that will be included in the certificate. A private key is usually created at the same time that you create the CSR, making a key pair. A CSR is generally encoded using ASN.1 according to the PKCS #10 specification.

A Certificate Authority will use a CSR to create your SSL certificate, but it does not need your private key. You need to keep your private key secret. The certificate created with a particular CSR will only work with the private key that was generated with it. So if you lose the private key, the certificate will no longer work.

How to obtain a CSR?

You can use our SSL tool in CSB to generate the CSR. In this case the private key is also created and stored in the system which means you do not have to worry about uploading it or keeping it safe.
However, if the tool limitations do not allow you to fullfill your requirements (such as wildcard CSR or CSR without OU... see KBA 3197486 - Error when generating CSR in SSL Certificates tool - Recruiting Marketing) then you can generate the CSR yourself using some other tool. For some examples please check this page by Digicert, one of the main Certificate Authorities : https://www.digicert.com/kb/csr-creation.htm
If you generate a CSR yourself, then you will have to upload the private key along with the Certificate files (Primary and intermediate) using Option 2 in the SSL tool.

What is contained in a CSR?

NameExplanationExamples
Common Name The fully qualified domain name (FQDN) of your server. This must match exactly what you type in your web browser or you will receive a name mismatch error.

jobs.sap.com
Organization The legal name of your organization. This should not be abbreviated and should include suffixes such as Inc, Corp, or LLC. SAP
Organizational Unit The division of your organization handling the certificate. Information Technology
IT Department
City/Locality The city where your organization is located. Walldorf
State/County/Region The state/region where your organization is located. This shouldn't be abbreviated. Germany
Country The two-letter ISO code for the country where your organization is location. US
DE
Email address An email address used to contact your organization.

webmaster@sap.com

See Also

2528548 - Partner Resources for Career Site Builder Implementations - Recruiting Marketing
2231401 - Updated SSL Certificate Renewal process - Recruiting Marketing
2565122 - FAQ on SSL Certificates for RMK Production Career Sites
3109381 - Overview About SSL Certificates tab in CSB - Recruiting Marketing
3156722 - How to generate an intermediate certificate - Recruiting Marketing
3197486 - Error when generating CSR in SSL Certificates tool - Recruiting Marketing

Keywords

RMK, SSL, CSR, Recruiting Marketing , KBA , LOD-SF-RMK-CER , Certificate Renewal, IP Address, Domain , LOD-SF-RMK-CSB , Career Site Builder , How To

Product

SAP SuccessFactors Recruiting all versions