title: CSR generated by keytool is not acceptable by Network Solutions
body: <p>When submitting CSR on the esteemed site <code>Network Solutions</code> I get an error message <code>The CSR provided uses an unsupported signature algorithm. Supported algorithms are: md5withrsa, sha1withrsa, oid 1.2.840.113549.1.1.4, oid 1.2.840.113549.1.1.5</code>. The command I am using is below and not sure why there are not accepting it when this is exactly what they have listed on <a href="http://www.networksolutions.com/support/csr-for-java-based-webservers-such-as-tomcat-using-keytool/" rel="nofollow">their site</a> and on <code>Apache Tomcat</code> site</p>
  
  <pre><code>keytool -genkey -keyalg RSA -alias tomcat -keystore domain_keystore.jks -keysize 2048
  </code></pre>
  
  <p>Followed by the command to generate <code>CSR</code></p>
  
  <pre><code>keytool -certreq -alias tomcat -file domain_keystore.csr -keystore domain_keystore.jks 
  </code></pre>
  
  <p>When I use <code>openssl</code> to generate key it gets accepted by <code>Network Solutions</code>. But some how I cannot get it to run with tomcat :( </p>
  
  <pre><code>openssl req -nodes -newkey rsa:2048 -keyout www_website_com.key -out www_website_com.csr
  </code></pre>
  
  <p>Exhausted and need help in installing thrid party certificate on Mac + Tomcat</p>