To enable HTTPS access to a core switch and install a certificate signed by the corporate certificate authority, a network engineer needs to generate a Certificate Signing Request (CSR) from the switch. The CSR contains information that will be included in the certificate such as the organization name, common name (domain name), locality, and country. It also contains the public key that will be included in the certificate. The command sequence typically involves entering global configuration mode on the switch, generating cryptographic keys (if they have not been generated already), and then creating the CSR.
The correct commands to issue a Certificate Signing Request from a Cisco device would involve first creating an RSA key pair which will be used for HTTPS server authentication and then requesting the certificate with specific parameters.
Reference: https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/sec_secure_connectivity/configuration/guide/conve