Use the CSR (Certificate Signing Request) generator to prepare the information needed to get an SSL/TLS certificate. The CSR contains information about the domain and other details needed to issue the certificate, including the public key. When generating the CSR, a private key is also created. The private key proves ownership of the certificate, so it must be kept secure. Don't send your private key to a certificate authority or share it with anyone else.
After you create the CSR, submit it to the certificate authority (CA) that you want to get your SSL/TLS certificate from. Before issuing the certificate, the certificate authority will verify that you are the domain owner. You can verify domain ownership using a DNS record, an HTTP file, or email, depending on the certificate and certificate authority. You can also get free SSL/TLS certificates for standard websites, like the ones from Let's Encrypt.
After getting the SSL/TLS certificate, you can install it on your hosting account. On BEST-HOSTING.cz, you can use the hosting administration interface under Subdomains and Vhost to change the vhost configuration for the domain and enter the required certificate and private key information. Once configured correctly, your website will be available over the secure HTTPS protocol on port 443.
When creating a CSR, make sure the Domain Name (CN) matches the domain for which the certificate will be issued. If the certificate covers more than one domain, the right domains must also be included in the SAN extension. Enter information into the generator fields without diacritical marks (e.g., accents, umlauts, etc.), unless the certificate authority or the specific request format supports them.
Keep your private key in a safe place. If you lose the private key, you can't get it back from the certificate. You'll usually need to make a new key pair and get a new certificate. Don't store your private key in public repositories or share it through unsecured communication channels.