OK it was a year ago when I did this last time and I forgot everything.

Do I get the CSR from Apache or Tomcat?

Na then the rest of the stuff too :-)