title: Is there a way to request ADCS to ignore PKCS#10 data
body: <p>I am submitting CMC requests to Microsoft AD Certificate Services in order to enroll certificates.
  These requests are signed by an enrollment agent certificate, and DN and SAN information is overloaded in the CMC.
  This works well, however i have the following issue: if a SAN is specified in the underlying PKCS#10 and not overloaded in the CMC, ADCS signs it anyway.
  For instance, let's say i have a PKCS#10 that contains a requested SubjectAlternativeName IP Address: 10.0.0.1, and there's no overload in the CMC for the SubjectAlternativeName IP Address, the issued certificate will contain SubjectAlternativeName IP Address: 10.0.0.1.</p>
  <p>So, is there a way to tell to ADCS to ignore data contained in the PKCS#10 ?</p>
  <ul>
  <li>either to consider only the public key part of it</li>
  <li>or, on a per field basis, ignore its PKCS#10 content</li>
  </ul>
  <p>The idea would be either to add the appropriate information to the CMC to do so, or to add an appropriate flag in the certification request (or any other appropriate way).</p>