How should you configure the certificate request?