PKCS#10 certificate signing request (CSR) inspector — parse requested identities and public-key metadata, calculate a fingerprint, and check the included self-signature without CA approval claims.