How to create CSR

CSR - Certificate Signing Request

It is a file containing encoded information about your company or organization, which is used to apply for a digital certificate. ZATCA requires a CSR to integrate with its e-invoicing system (FATOORAH) for Phase 2 compliance.

Key fields includes:

csr.common.name

The Common Name (CN) is used to identify the entity for whom the certificate is issued.

Example: TST-886431145-399999999900003

TST: Indicates the certificate environment type (Test environment).It can be PRD also, Production environment.
886431145: This could represent the ZATCA registration or a testing entity reference number.
399999999900003: A VAT Number or Unique Company Identifier registered with ZATCA.

csr.serial.number

A unique identifier for the CSR to distinguish one certificate request from another.

Example: 1-TST|2-TST|3-(8digit)-(4digit)-(4digit)-(4digit)-(12digit)
1-TST|2-TST|3-123B45A4-4321-4B4S-4321-987654321GFD

1-TST|2-TST|3- : Version or instance of the certificate (first in the test phase).
UUID: A Universally Unique Identifier (UUID) with placeholder formats: (8digit)-(4digit)-(4digit)-(4digit)-(12digit)

This is a standardized structure that follows the typical UUID (Universally Unique Identifier) format. Each segment has a defined length.

(8digit): A random 8-alphanumeric (e.g., ed22f1d8)
(4digit): A random 4- alphanumeric (e.g., 5678)
(4digit): Another random 4- alphanumeric (e.g., 9b58)
(4digit): Yet another 4- alphanumeric (e.g., 8765)
(12digit): A unique 12- alphanumeric for additional randomness (e.g., d9a8f11e874f)

csr.organization.identifier

The official identifier of the organization, such as the VAT Number, CRN (Commercial Registration Number), or ZATCA TIN.

Example: 399999999900003

csr.organization.unit.name

Typically refers to the Taxpayer Identification Number (TIN), Specifies a particular division or business unit of the organization making the request.

Example: 399999999900003

A VAT Number has 15 digits.
If the 11th digit is 1, then it is Single Business VAT
If the 11th digit is NOT 1, then it is Group VAT

csr.organization.name

The legal name of the organization as registered with ZATCA.This name should exactly match the official documentation, such as the company's commercial registration.

csr.country.name

The country code where the organization is registered.

Example: SA - Saudi Arabia

csr.invoice.type

Specifies the type of e-invoice the certificate will support.

Example:The most commonly used value is 1100, which represents a Standard Tax Invoice used for regular transactions. However, it can also be set to 1200, which represents a Simplified Tax Invoice, typically used for smaller or retail transactions.

csr.industry.business.category

Describes the industry sector or business category of the organization.

Example: Technology Solutions, Retail and Wholesale, Manufacturing, or Consulting Services