!!! Overview [{$pagename}], In [Public Key Infrastructure] ([PKI]) systems, a [{$pagename}] ([CSR]) is a message sent from an applicant to a [Certificate Authority] in order to apply for a digital identity [certificate]. The most common format for [CSRs] is the [PKCS #10|PKCS10] specification and another less common is the [Signed Public Key and Challenge] ([SPKAC]) format generated by some Web browsers. !! CertificationRequestInfo CertificationRequestInfo is an ASN.1 type that contains: subject's * [Distinguished Name] * subject [Public Key] * Optionally a set of attributes is constructed by an entity requesting certification. This value is [Digitally Signed] by the subject's [Private Key] and CertificationRequestInfo and the [Digital Signature Algorithm] ID is sent to the [Certificate Authority] Certification request information shall have [ASN.1] type CertificationRequestInfo: {{{ CertificationRequestInfo ::= SEQUENCE { version INTEGER { v1(0) } (v1,...), subject Name, subjectPKInfo SubjectPublicKeyInfo{{ PKInfoAlgorithms }}, attributes [0] Attributes{{ CRIAttributes }} } SubjectPublicKeyInfo { ALGORITHM : IOSet} ::= SEQUENCE { algorithm AlgorithmIdentifier {{IOSet}}, subjectPublicKey BIT STRING } PKInfoAlgorithms ALGORITHM ::= { ... -- add any locally defined algorithms here -- } Attributes { ATTRIBUTE:IOSet } ::= SET OF Attribute{{ IOSet }} CRIAttributes ATTRIBUTE ::= { ... -- add any locally defined attributes here -- } Attribute { ATTRIBUTE:IOSet } ::= SEQUENCE { type ATTRIBUTE.&id({IOSet}), values SET SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{@type}) } }}} !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]