Create a CSR From the Trusted CA Object

Next you need to supply the DN for the certificate. For example:

cn=firewall.yourcompany.com,o=yourcompany,st=minnesota,c=us

This will create the CSR based off of the root CA that you selected.