Step 3: Create Merchant Identity Certificate in Apple Developer Account


  1. You will need to generate a new Certificate Signing Request (CSR) and Private Key before continuing. This is easiest done using a terminal command as follows:

    openssl req -new -newkey rsa:2048 -nodes -keyout applepay.key -out applepay.csr -subj '/O=Subscribe Pro/C=US'

    This will generate two files: applepay.key and applepay.csr

    Note: The CSR should be generated using your company's details. In the above example, Subscribe Pro should be replaced with your company name, and US should be replaced with your company's country.

    Store these files in a place where you can reference them again later, as you will need to copy the contents of these files into Subscribe Pro as well.


  2. Login at the Apple Developer website with your Apple ID and click on the Account navigation link.

    Apple Developer Overview

  3. Navigate back to the Apple Developer website and click on the Account navigation link. Then, click on Certificates, IDs & Profiles. Click Identifiers and then select Merchant IDs from the dropdown menu on the right. Click on your Merchant ID in the table.

    Apple Developer Merchant IDs

  4. At the bottom of the page, click Create Certificate under the Apple Pay Merchant Identity Certificate heading.

    Apple Developer Create Merchant ID Certificate 1

  5. Upload the applepay.csr file generated at the start of this page and click Continue.

    Apple Developer Create Merchant ID Certificate 2

  6. Click Download to download a file called merchant_id.cer

    Apple Developer Download Merchant ID Certificate

  7. Convert the .cer file to a .pem file using the following terminal command:

    openssl x509 -inform der -in merchant_id.cer -out merchant_id.pem

  8. Save these two files with the two other files generated at the top of this page.