Needed a CSR for a new certificate today, what the heck? OSX has openSSL built in!
openssl req -new -newkey rsa:2048 -nodes -keyout mykey.pem -out myreq.pem