Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not intimately familiar with MS PKI, but it was a question that came up in a discussion for an issue a coworker is having. When you input the request fields manually on a PKI server, the cert generated has an automatic name given to it. When requested via a pasted CSR, it's just called cert-new. Is there a field in the CSR that can control this?

share|improve this question
up vote 1 down vote accepted

From what I've seen, no - usually the certificate signing requests (CSR or PKCS10) are all about what the cert should look like, or what the cert will be describing. How it's stored when it's retrieved is a matter of the software you are using to request and retrieve the certificate.

I'm not sure quite what you are trying to do, but it's possible to rewrite the client side of the request if you have the time and money to spend - I seem to remember than the Microsoft CA and/or a fronting IIS server can be configured to listen for CSRs and respond appropriately - with that capability, you'd have the option of storing the output any way you like.

share|improve this answer
I think the initial problem was the administrator has them set for approvals, and when multiples were approved in batch, there was no easy way for the user to retrieve them and know which was for which request without looking into each file. – Lee Sep 12 '12 at 18:42
I've seen that... but I don't believe anything in the request format is going to help you out. – bethlakshmi Sep 13 '12 at 14:37
Just to not leave this open, what I ended up doing was in my custom code that's doing the cert submission, parse the CN out of the returned issued cert, and save the response in a file with the same name. – Lee Jan 9 '14 at 21:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.