A message a key holder sends to a certificate authority asking it to issue a certificate, almost always in PKCS#10 format. It carries the public key, the requested subject and extensions, and a self-signature; the private key never leaves the requester. The CA decides what actually ends up in the issued certificate — a CA can and often does override requested fields.