CSR

Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.

PKCS#10 CSR Preview.

At a glance

How much Poka reads

B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.

Confidence: medium (the reviewer read the code). Basis: Reviewed 2026-10-26: read parsers/poka-csr/src/main.rs (530 lines) and plugin.json. No unit tests or tests/samples.rs; the corpus has kube-cert-manager_ca.csr, read by no test. Covers .csr, .p10 and .req. The tree decodes the request with x509-parser: the subject's distinguished name, the public key (algorithm, size, exponent or curve), the signature algorithm, and the requested extensions (subject alternative names, key usage, basic constraints, extended key usage). Judgement: B2: the request is decoded; the gaps are rarer attributes and verification.

What Poka does not read

• The self-signature is not verified
• Attributes other than the extension request (challenge password, unstructured name) are not shown
• Requested extensions other than SAN, key usage, basic constraints and extended key usage are not shown

Libraries

Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.

• x509-parser (used; MIT OR Apache-2.0; Rust)
• x509-cert (RustCrypto) (candidate; Apache-2.0 OR MIT; Rust; https://docs.rs/x509-cert/latest/x509_cert/request/struct.CertReq.html) — CertReq implements DER decoding (and PEM with the pem feature)
• rcgen (candidate; licence unconfirmed; Rust; https://docs.rs/rcgen/latest/rcgen/struct.CertificateSigningRequestParams.html) — Primarily a generator; from_der/from_pem parse a CSR when the x509-parser feature is enabled; licence not shown on the page fetched

Sources

• parsers/poka-csr/src/main.rs
• parsers/poka-csr/plugin.json