Use keytool utility.

Example -

1. Generate the key
keytool -genkey -v -alias mykey-basic -keyalg RSA -keysize 1024 -sigalg
MD5withRSA -keys
tore my.keystore

2. Generate CSR with -certreq option
keytool -certreq -v -alias mykey-basic -file ~/new.csr -keystore
my.keystore -storepa
ss password

3. Send the CSR To a CA (e.g. verisign)

4. Receive the certificate from CA (e.g. Verisign)

5. Install the certificate
keytool -import -v -trustcacerts -alias

Hope it helps.

- Subrata