Request a certificate from a certificate authority in Keychain Access on Mac
Use the Certificate Assistant in Keychain Access to request a certificate from a certificate authority.
You can obtain many certificates signed by different CAs that are each valid for different purposes and subject to different policies. For example, you may have one certificate that lets you sign email and another that lets you identify yourself in Messages.
In the Keychain Access app
on your Mac, choose Keychain Access > Certificate Assistant > Request a Certificate From a Certificate Authority.Enter your email address, name, and the email address of the certificate authority you want to issue you the certificate, then click Continue.
To change the way key pairs are generated, click “Let me specify the key pair information”. Then choose the key size and algorithm, and click Continue.
Note: You can create RSA keys up to 4096 bits. RSA keys smaller than 2048 bits are no longer supported.
Review the certificate, then click Done.
Click Continue.
The request for a certificate is sent to the certificate authority. If the authority agrees, it creates your certificate and returns it to you.