I'd like to know how to make a decent Certificate Signing Request (CSR) to secure my website and e-mail with a wildcard SSL certificate. With recent exploits as POODLE on SSLv3 and such, I'd like to know how to make a decent Certificate Signing Request to make a valid (and very secure) certificate and order one. I'd love to have a high bits key (at least 2048 bits, 4096 bits if possible). I know where to order, but I would like some more advice on creating the request.
Can someone give more advice on how to make one and on why chosen for those options?