Search notes:

Certificate Signing Request (CSR)

A Ceritificate Signing Request (CSR) is used in a public key infrastructure by an applicant to apply for a digital identity certificate.

A CSR usually consists of

(Digitally signed) identifying information (such as the domain name)
The public key of the key pair with whose private key the identifying information was signed.

Domain Validation (DV)

RFC 8555 outlines the steps to obtain a Domain Validation (DV) certificate like so:

1) Generate a PKCS#10 [RFC2986] Certificate Signing Request (CSR).

2) Cut and paste the CSR into a CA’s web page.

3) Prove ownership of the domain(s) in the CSR by one of the following methods:

Put a CA-provided challenge at a specific place on the web server.
Put a CA-provided challenge in a DNS record corresponding to the target domain.
Receive a CA-provided challenge at (hopefully) an administrator-controlled email address corresponding to the domain, and then respond to it on the CA’s web page.

4) Download the issued certificate and install it on the user’s Web Server.

Format

Formats for a CSR include

PKCS#10
Signed Public Key and Challenge (SPKAC) which is generated by some web browsers

Base64 representation / PKCS

The base 64 representation of the PKCS#10 standard for a CSR looks like the following snippet:

Fatal error: Uncaught PDOException: SQLSTATE[HY000]: General error: 8 attempt to write a readonly database in /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php:78 Stack trace: #0 /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php(78): PDOStatement->execute(Array) #1 /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php(30): insert_webrequest_('/notes/developm...', 1788411822, '216.73.217.21', 'Mozilla/5.0 App...', NULL) #2 /home/httpd/vhosts/renenyffenegger.ch/httpsdocs/notes/development/security/cryptography/public-key/certificate/signing-request/index(82): insert_webrequest() #3 {main} thrown in /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php on line 78

Certificate Signing Request (CSR)

Domain Validation (DV)

Format

Base64 representation / PKCS

See also