Guides
  1. How-To

Get started with Apple Pay integration

This guide explains how to generate and sign the two Apple Pay certificate signing requests (CSR) required for Apple Pay integration: the Merchant Identity Certificate and the Payment Processing Certificate.

Before you start, make sure you have access to the Apple Developer Portal.

Create a CSR for the Merchant Identity Certificate

  1. Generate a private key that will be used to sign your CSR. Keep this file securely stored.
openssl genrsa -out merchant_id.key 2048
  1. Generate a CSR using the private key.
openssl req -new -key merchant_id.key -out merchant_id.csr -sha256

During CSR creation, you’ll be prompted to enter several fields. At minimum, provide the Common Name (CN), for example, your Apple Merchant ID. All other fields can be left blank by pressing Enter.

Country Name (2 letter code) [C]
State or Province Name (full name) [ST]
Locality Name (e.g., city) [L]
Organization Name (e.g., company) [O]
Organizational Unit Name (e.g., section) [OU]
Common Name (Apple Merchant ID) [CN]
Email Address
A challenge password
  1. Upload CSR and download the certificate:
  • Log in to Apple Developer Portal → Certificates, Identifiers & Profiles → Merchant IDs.
  • Select your Merchant ID.
  • Click Create Certificate → Merchant Identity Certificate.
  • Upload merchant_id.csr and download the signed .cer file.

Create a CSR for the Payment Processing Certificate

📘

Note

A Payment Processing Certificate expires every 25 months.

  1. Generate an ECC key.
openssl ecparam -name prime256v1 -genkey -noout -out apple_pay_processing.key
  1. Generate CSR using the ECC key.
openssl req -new -key apple_pay_processing.key -out apple_pay_processing.csr -sha256
  1. Upload CSR and download the certificate:
  • Log in to Apple Developer Portal → Certificates, Identifiers & Profiles → Merchant IDs.
  • Choose your Merchant ID.
  • Under Apple Pay Payment Processing Certificate, click Create Certificate.
  • Upload apple_pay_processing.csr and download the signed .cer file.
📘

Note

For more details, refer to Apple’s documentation on Creating a certificate signing request.

  1. Provide the following to Centrobill:
  • both keys
  • both certificates
  • Apple merchant ID in the format merchant.com.{site_name}.pay
  • full website URL

Integrate Apple Pay on your website

Once both certificates are signed and approved, proceed with integrating Apple Pay on your website. Refer to this guide for instructions on displaying the Apple Pay button and QR code, validating the Apple Pay session, and processing payments.