@roland, I received the Malformed CSR Advisory email, but I tested my CSRs and they look correct:
> openssl asn1parse -inform pem -in 2013.albuquerque.wordcamp.org.crt
0:d=0 hl=4 l=1279 cons: SEQUENCE
4:d=1 hl=4 l= 999 cons: SEQUENCE
8:d=2 hl=2 l= 3 cons: cont [ 0 ]
10:d=3 hl=2 l= 1 prim: INTEGER :02
[...]
Are there any other causes that would have triggered that email? Are there other things I should test for?