Configurando SSL no Apache2

Eu gerei uma nova chave privada e um csr

root@univhub:/# openssl req -out /etc/ssl/certs/univhub.csr -new -newkey rsa:2048 -nodes -keyout /etc/ssl/private/univhub.key
Generating a 2048 bit RSA private key
.............................................................+++
...............+++
writing new private key to '/etc/ssl/private/univhub.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NP
State or Province Name (full name) [Some-State]:Bagmati
Locality Name (eg, city) []:Kathmandu
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Univhub Private Limited
Organizational Unit Name (eg, section) []:IT Department 
Common Name (e.g. server FQDN or YOUR name) []:univhub.com    
Email Address []:root@univhub.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

E minha configuração apache de trabalho tem as seguintes linhas

SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key

#SSLCertificateFile     /etc/ssl/certs/univhub.csr
#SSLCertificateKeyFile   /etc/ssl/private/univhub.key

Ao reverter as linhas comentadas, o que eu recebo em uma única linha no apache errorlog

AH00016: Configuration Failed

O CSR precisa ser validado e transformado em um certificado, normalmente o valor pelo qual você paga uma empresa SSL. Você normalmente compraria um certificado e faria o upload do seu CSR, que seria devolvido como um certificado validado.