Does Boulder verify CSR signatures?

Yep. This recently came up here when someone tried to submit a CSR with the public key of Let’s Encrypt’s intermediate certificate (due to a client bug).

3 Likes