Use this procedure to generate a certificate signing request (CSR) and store it into a file. This CSR is required to obtain the offline subject certificate.
enable
configure terminal
certificate generate-csr [relaxed]