5.1.3 PKCS #10 Certificate Requests

A certificate request is a structure, which contain information about an applicant of a certificate service. It usually contains a private key, a distinguished name and secondary data such as a challenge password. GnuTLS supports the requests defined in PKCS #10 [RFC2986] (see section Bibliography). Other certificate request’s format such as PKIX’s [RFC4211] (see section Bibliography) are not currently supported.

In GnuTLS the PKCS #10 structures are handled using the gnutls_x509_crq_t type. An example of a certificate request generation can be found at section ex:crq.