Is it possible to issue a certificate with different attributes than in certificate siging request? I have a keypair and I generated a cert. request with extra attributes. Can the CA/RA or anybody modify the request wo my keypair when it is signed?
The certificate request is just a container to transport your public key and some information you like to have included in the certificate. The only thing the CA really needs from this is your public key. Everything else can be ignored by the CA and will often be ignored and instead the CA will create a new certificate request which includes your public key and the information the CA likes to include into the certificate. This new certificate request then gets signed, i.e. usually not your original certificate request.