The certificate is public even so the crucial is personal . Yes a critical pair has to be produced to make the csr. Take a look right here. I am finding this 'HTTPS hostname wrong:' error when seeking to connect to a server working with https. My url appears anything https://www.hostscheap.com/ssl-certificates