openssl req -new -newkey rsa:2048 -nodes -keyout example.key -out example.csr

# For common name enter full domain, for wildcard use *.example.com format

# If you received bundle separately from root then you need to combine them:
cat domain.crt domain.sa-bundle >> domain-bundle.crt