> Please read this section carefully: https://datatracker.ietf.org/doc/html/rfc2986#section-3
Yeah, go read it:
The
certification request information consists of the entity's
distinguished name, the entity's public key, and a set of attributes
providing other information about the entity.