Go to the /etc/ssl/certs/ or /usr/share/ssl/certs/ directory and run:
openssl genrsa -des3 -out ../private/DOMAIN.key 2048
openssl req -new -key ../private/DOMAIN.key -out DOMAIN.csr
Create an SSL Certificate Signing Request at the command-line
Go to the /etc/ssl/certs/ or /usr/share/ssl/certs/ directory and run:
openssl genrsa -des3 -out ../private/DOMAIN.key 2048
openssl req -new -key ../private/DOMAIN.key -out DOMAIN.csr