title: Difference between RFC 2986 & RFC 4211 and which one is a spec for Certificate Signing Requests?
body: <p>The abstract for <a href="https://www.rfc-editor.org/rfc/rfc4211" rel="nofollow noreferrer">RFC 4211</a> seems to say that the RFC is meant to be a spec for CRMF (which I understand to be a protocol for transmitting a CSR), while <a href="https://www.rfc-editor.org/rfc/rfc2986" rel="nofollow noreferrer">RFC 2986</a> specs out the <code>CertificationRequest</code> information type, which seems also be a CSR.</p>
  <p>What is CRMF, how does it relate to a CSR, and which RFC ultimately specs out a CSR?</p>
  <p>Thanks!</p>