A CSR is signed by the private key corresponding to the public key in the CSR This check verifies the signature on the CSR is valid An invalid signature indicates that the CSR has been modified since it was created or the public key in the CSR doesn't correspond to the private key used to sign it