# Extra attributes in a certificate signing request

When creating a certificate signing request, there is a part where openssl says "Please enter the following extra attributes to be sent with your certificate request". One of these is a challenge password.

Under what circumstances will this password be needed?

• I think this is a password that looks strangers out from actually looking at the contents of the CSR (e.g. enlisted name, state, city, emails, public keys, ...) – SEJPM Jul 16 '16 at 18:43
• But this password is not used to encrypt the CSR. So I would not imagine its used to obfuscate the contents of the CSR – Minaj Jul 16 '16 at 19:02
• If you want you can remove this prompt (and attribute) and/or unstructuredName, and/or in principle add others but I know no sensible others to add, in the section identified by the attributes setting in the [req] section of your config file, normally [req_attributes]. – dave_thompson_085 Jul 17 '16 at 1:56