CA ROOT Certificate

[stretchy]

Does anyone know how to generate the CSR for a CA ROOT certificate. I followed the instructions for R55, but I can't can't get the CSR hash.

When I click on the VPN tab for my gateway. I select the certificate and click view I get this:

Subject: CN=sslvpnvm.company.com,O=company,ST=city,C=ca,CN= VeriSign Trial Secure Server Test Root CA,OU=For Test Purposes Only. No assurances.,O=VeriSign\, Inc.,C=US
Issuer: O=emcr60vm..wxusmm
Not Valid Before: Mon Jun 25 14:10:32 2007 Local Time
Not Valid After: Sun Jun 24 14:10:32 2012 Local Time
Serial No.: 67829
Key Size: 1024
Subject Alternate Names:
IP Address: 192.168.0.51
CRL distribution points:
http://emcr60vm:18264/ICA_CRL1.crl
CN=ICA_CRL1,O=emcr60vm..wxusmm
Key Usage:
digitalSignature
keyEncipherment
Basic Constraint:
not CA
MD5 Fingerprint:
19:C3:EA:61:FF:F7:35:FE:33:D1:A1:15:B8:84:8F:59
SHA-1 Fingerprints:
1. 55:11:55:DD:4E:36:92:7E:B0:29:A2:06:EE:D7:F0:32:DB :51:01:7C
2. BEAU GENT DRUM HUGO CODY TAD LINT ANNA FLAG SKID FELL HAP

This will not work. If anyone has done this, a nice pointer would be appreciated.