The entity must submit a certificate request with the public key according to the procedures detailed in section 4.1.