$ 0 0 It must be the private key you used to create the CSR in the first place, so it cannot be the CSR itself.In PEM format, of course.