a PKCS #10 encoded structure used to request a new Certificate from a Certificate Authority.

Note 1 to entry: Devices have hardware based mechanisms, such as a TPM, to protect Private Keys.