Which two of the following options must be included in the CSR that is to be signed by a CA? (Choose two.)