message from an applicant to a certificate authority to apply for a digital identity certificate; lists the public key the certificate should be issued for, identifying information (e.g. domain name) and integrity protection (e.g. digital signature)