Update to certificate operations

The certificate-request (PKCS#10) handling has been changed, to support the RFC 2986 standard’s interpretation of the attributes field.

You should consider retesting activation and renewal, if you do not have active customers on all participating datacentrals, to ensure that you solution works as intended.