3751453 - CSR signing via destination service fails with error "could not generate certificate from provided payload"

• Attempting to sign a CSR via the destination service CSR signing API fails.
• Error returned: "Could not generate certificate from provided payload".
• Backend message observed: "Malformed CSR: Extended key usage does not match policy."

• SAP Business Technology Platform
• Destination service for Cloud Foundry environment

destination service, csr signing, extended key usage, eku, tls web client authentication, tls web server authentication, malformed csr, certificate policy, could not generate certificate from provided payload, csr base64, certificate signing, cloud foundry, integration suite, client certificate, csr requirements , KBA , BC-CP-DEST-CF , Destination service for Cloud Foundry environment , Problem