210-250 · Question #196
Which two of the following options must be included in the CSR that is to be signed by a CA? (Choose two.)
The correct answer is A. subject's public key information C. subject identity information. A Certificate Signing Request (CSR) is a structured message containing the applicant's public key and identity details, submitted to a CA to be signed into a certificate.
Question
Which two of the following options must be included in the CSR that is to be signed by a CA? (Choose two.)
Options
- Asubject's public key information
- Bwritten invitation code to join the CA
- Csubject identity information
- Dcertificate intended usage
How the community answered
(42 responses)- A88% (37)
- B7% (3)
- D5% (2)
Why each option
A Certificate Signing Request (CSR) is a structured message containing the applicant's public key and identity details, submitted to a CA to be signed into a certificate.
The subject's public key information is a mandatory CSR field because it is the actual public key the CA will bind to the subject's identity in the issued certificate, as defined in PKCS#10 (RFC 2986).
There is no such thing as a 'written invitation code' in the PKI or CSR process - certificate enrollment is governed by standards like PKCS#10, not invitation codes.
Subject identity information - such as Common Name, Organization, and Country - is required in the CSR so the CA can verify and embed the identity into the signed certificate.
Certificate intended usage (Extended Key Usage) is an optional extension that may be requested in a CSR but is not a mandatory required field per RFC 2986.
Concept tested: Certificate Signing Request (CSR) required fields
Source: https://www.rfc-editor.org/rfc/rfc2986
Topics
Community Discussion
No community discussion yet for this question.