A CSR is a certificate signing request (your business details) which is required when installing the SSL Certificate, if your certificate is expired or if you are renewing your certificate then you need to request for a new CSR.
The RSA key is an encryption key created after submitting the CSR. It protects the sensitive information of your website.