Used in conjunction with rcDigitalCertGenerateCsr or rcDigitalCertInstallFile & rcDigitalCertInstallFileName (for offline subject cert only) to: - allow generation of CSR without setting all certificate subject fields by relaxing consistency checks. - allow inclusion of Subject Alternative Names (SAN) in CSR - allow installing certificates(offlineSubjectCert only) not only in DER but PKCS12 format as well with the following minimal restrictions: - either Subject Common Name or SAN must be configured - only those Certificate Subject fields(subset of rcDigitalCertScalars 1 -> 7) present in rcDigitalCertInstallFileName (offlineSubjectCert about to be installed) are matched against their counterparts configured on box Ignored if used in a different context than the 2 previously mentioned(with rcDigitalCertGenerateCsr or rcDigitalCertInstallFile) SNMP get for this object will always return notApplicable(2) because it is only meaningful in the context of 'generate-csr' or 'install-file offline-subject-filename' commands