title: Which encryption AES/DES should i use for private key for ssl certificate?
body: <p>I've just bought comodo essential wildcard certificate, they asked me to generate csr to activate it.</p>
  
  <p>As i understood, i need to:</p>
  
  <ol>
  <li>Generate RSA 2048bit private key</li>
  <li>Generate CSR based on it</li>
  </ol>
  
  <p>As i see, <code>openssl genrsa</code> command accepts different encryption params:</p>
  
  <ul>
  <li>-des            encrypt the generated key with DES in cbc mode  -des3           encrypt the generated key with DES in ede cbc mode (168 bit key) </li>
  <li>-aes128, </li>
  <li>-aes192, </li>
  <li>-aes256</li>
  </ul>
  
  <p>What should i use?</p>