REM generate public/private key, usually RSA, but could be DSA.
REM Modern certs are mostly RSA, but DSA certs work in Java 1.2.
REM set up distinguished name as your Certificate Authority requests.
keytool -genkey -keyalg RSA -alias pluginsigner -dname "CN=mindprod.com, OU=Secure Application Development, O=Canadian Mind Products, L=Victoria, S=BC, C=CA"

REM export cert request
keytool -certreq -alias pluginsigner -file certrequest.csr