---
title: Certificate Signing Requests
summary: A certificate signing request is needed to obtain a TLS certificate from a Certificate Authority (CA).
url: https://www.fastly.com/documentation/reference/api/tls/custom-certs/csrs
---

A certificate signing request is needed to obtain a TLS certificate from a Certificate Authority (CA).

## Data model

| Field | Type | Description |
|-------|------|-------------|
| `city` | string | Locality (L) - The locality, city, town, or village where the organization is located. |
| `common_name` | string | Common Name (CN) - The fully qualified domain name (FQDN) to be secured by this certificate. The common name should be one of the entries in the SANs parameter. |
| `country` | string | Country (C) - The two-letter ISO country code where the organization is located. |
| `email` | string | Email Address (EMAIL) - The organizational contact for this. |
| `key_type` | string | CSR Key Type. |
| `organization` | string | Organization (O) - The legal name of the organization, including any suffixes. This should not be abbreviated. |
| `organizational_unit` | string | Organizational Unit (OU) - The internal division of the organization managing the certificate. |
| `postal_code` | string | Postal Code - The postal code where the organization is located. |
| `relationships.tls_private_key.id` | string | Optional. An alphanumeric string identifying the private key you've uploaded for use with your TLS certificate. If left blank, Fastly will create and manage a key for you. |
| `sans` | array | Subject Alternate Names - An array of one or more fully qualified domain names or public IP addresses to be secured by this certificate. Required. |
| `state` | string | State (S) - The state, province, region, or county where the organization is located. This should not be abbreviated. |
| `street_address` | string | Street Address - The street address where the organization is located. |
| `type` | string | CSR Resource Type. |
| `errors` | array |  |
| `content` | string | The PEM encoded CSR. |

## API endpoints

### Create CSR

**POST** `/tls/certificate_signing_requests`

Creates a certificate signing request (CSR).