I've just bought comodo essential wildcard certificate, they asked me to generate csr to activate it. As i understood, i need to: Generate RSA 2048bit private key Generate CSR based on it As i see, openssl genrsa command accepts different encryption params: -des encrypt the generated key with DES in cbc mode -des3 encrypt the generated key with DES in ede cbc mode (168 bit key) -aes128, -aes192, -aes256 What should i use?

Which encryption AES/DES should i use for private key for ssl certificate?

I've just bought comodo essential wildcard certificate, they asked me to generate csr to activate it.

As i understood, i need to:

As i see, openssl genrsa command accepts different encryption params:

-des encrypt the generated key with DES in cbc mode -des3 encrypt the generated key with DES in ede cbc mode (168 bit key)
-aes128,
-aes192,
-aes256

What should i use?