PKCS#10 do not support multiple signatures. You have to convert (embed) PKCS#10 request to PKCS#7 and use external signature to sign PKCS#7 message. You may need to check out my blog post: https://www.sysadmins.lv/blog-en/introducing-to-certificate-enrollment-apis-part-5-enroll-on-behalf-of.aspx
↧