http://www.rackspace.com/knowledge_center/article/generate-a-csr-with-openssl
Just set CrtFile, KeyFile and ChainFile, then fire the certificate-update event:
http://docs.nethserver.org/projects/nethserver-devel/en/latest/certificate_management.html#install-a-custom-certificate