Cert Rqsts and Key Pairs

[Eric Bomarsi <ebomarsi@xxxxxxxxx>]

Is there any practical reason why a network device would
need to generate multiple certificate requests each including
the same public/private key pair?  Maybe for some reason
two cert rqsts would include the same key pair, but have
different distinguished names or extensions?

I am writing a PKI MIB and need to determine the best way
for a pkiCertRqstEntry to reference a public/private key-pair:

1) include keypair info (algorithm and length) in pkiCertRqstEntry
such that the keypair is created along with the pkiCertRqstEntry.
This would limit the key-pair use to the single pkiCertRqstEntry.

2) create a separate pkiKeyPairTable where pkiKeyPairEntries
are referenced by pkiCertRqstEntries:

2a) If always 1 pkiCertRqstEntry to 1 pkiKeyPairEntry, then
I can use the same index for both tables.

2b) Otherwise (n pkiCertRqstEntries to 1 pkiKeyPairEntry)
a different index for the pkiCertRqstTable is necessary.

Thanks in advance,
Eric Bomarsi