To establish trusted SSL connection I need to create a certificate request. For example, if I use openSSL I can do it by the following command:
openssl req -new -key privkey.pem -out cert.csr
Anyone can do it. I wander how CA ensures that a certificate request is coming from me? Maybe somebody else create a certificate request on behalf of me. Maybe my mail to CA was hacked and a certificate request was replaced. Can I sign my certificate request and to send my signing public key to CA (e.g. in the separate mail)? In this case it is possible to ensure that a certificate request is coming from me.