Re: CSR

[Mark Johnson]

I thought the usual procedure was this:
1. Generate your own private and public keys (and a corresponding .csr
file).
2. Submit that .csr file to a Certificate Authority (a CA, eg,
Verisign).
3. Get a signed public key back from Verisign. Install it.
4. Now, you have a CA signed public key that corresponds to your private
server key.

Is that the way it works, or what?