CSRs generated by ssl-signing-request.jsp do not have metatata
When a CSR is created through the Server Certificates interface in the admin console, and the issuer information is updated the only information the CSR will contain is the CN.
Openfire is currently placing the issuer information in the issuerDN and just the XMPP domain in the subjectDN and the subjectAltNames like in the following example:
critical(false) 184.108.40.206 value = DER Sequence
Tagged  IMPLICIT
I'm trying to figure out if our interpretation of the specs was correct and if most CAs will be happy with our CSR.