[Acme] Integrated with CSR. Re: ACME signature mechanics

[Anders Rundgren <[e-mail]>]

The "csr" object holds a public key and an associated signature that goes over
the public key and a hypothetical attribute.  This is a bare-bones CSR.

The counter/attestation-signature goes over the entire package.


{
   "type": "certificateRequest",
   "csr":
     {
       "domain": "acme.com",
       "signature":
         {
           "algorithm": "ES256",
           "publicKey":
             {
               "type": "EC",
               "curve": "P-256",
               "x": "vlYxD4dtFJOp1_8_QUcieWCW-4KrLMmFL2rpkY1bQDs",
               "y": "fxEF70yJenP3SPHM9hv-EnvhG6nXr3_S-fDqoj-F6yM"
             },
           "value": "MEUCIF8p4ZY7YGJFaG8X41S-7ZCv...zesjHVc_pUqAa-IcbqefCTR9AvwivtbKA"
         }
     },
   "signature":
     {
       "algorithm": "RS256",
       "certificatePath":
         [
           "MIIETTCCAjWgAwIBAgIGAUoqo740MA0GCS...s9Zi90RyQ7UzWNrQjoLERGLkuetIw",
           "MIIFOjCCAyKgAwIBAgIBATANBgkqhkiG9w...O4Zfwjxug_CkeRb2m2sKaBNgCpJig"
         ],
       "value": "EmEcktZ2gyG639-vzCf_3b3A6CF8N_...gXLy-zDCUnXVv_P7kqkJlABNgnNRbeLmtFgw"
     }
}