Generate a Certificate Signing Request (CSR) on Ubuntu 14.04

openssl genrsa -out example.com.key 4096

openssl req -new -key example.com.key -out example.com.csr

Remark: For a cacert.org certificate you will at least have to enter a CN (Common Name) which is the domain you need the certificate for – e.g. example.com.