Document how to bundle a CSR in a JWT with a Signature produced by the Application/Device Certificate
Add a SupportedCSRFormats property to CertificateManager.
CertificateManager can detect PKCS10 or JWS format in a ByteString so no change to Method needed.
For Push, need a new Method CreateSigningRequestWithProofOfOrigin.
The Server uses the Certificate it is using for the SecureChannel used to call CreateSigningRequestWithProofOfOrigin to create a signature in the JWS.
Server returns a JWS with a CSR and a Signature.
Need to document the format of the JWS format (i.e. payload == CSR, add signature + chain etc).