Support for the CMP PKCS #10 certificate request message (type p10cr)

Table 1 identifies the fields that PKI Services supports in the data structure defined in RFC 4210 for the CMP PKCS #10 certificate request message (type p10cr)).

Table 1. Supported fields in the CMP PKCS #10 certificate request message (type `p10cr`)
	Field name	Notes
In the `CertificationRequest` structure:		When this message type is received by PKI Services, the recipient field is used in conjunction with the _PKISERV_CMP_DOMAIN_ISSUER`n` environment variables to determine to which PKI Services CA domain to route the request, provided the recipient is encoded as a `directoryName`. For information about the _PKISERV_CMP_DOMAIN_ISSUER`n` environment variables, see Table 1.
	`certificationRequestInfo`
	`signatureAlgorithm`
	`signature`
In the `CertificationRequestInfo` structure:
	`version`
	`subject`
	`subjectPKInfo`
	`attributes`	If the _PKI_CMP_HONOR_CLIENT_EXTS environment variable is not set to 1 and the `extensionReq` attribute is specified, the message is rejected. If the environment variable is set to 1, the `reqExtensions` attribute is honored if present, but is not required.