var cRequest = createObject('X509Enrollment.CX509CertificateRequestPkcs10');
        var cPrivateKey = createObject('X509Enrollment.CX509PrivateKey');
        cPrivateKey.ProviderType = Crypto.PROV_GOST_2001_DH;
        cRequest.InitializeFromPrivateKey(Crypto.AT_KEYEXCHANGE, cPrivateKey, '');

        var cDN = createObject('X509Enrollment.CX500DistinguishedName');
        var subject = ...;
        cDN.Encode(subject);
        cRequest.Subject = cDN;

        var cKUsage = createObject('X509Enrollment.CX509ExtensionKeyUsage');
        cKUsage.InitializeEncode(
            Crypto.XCN_CERT_DIGITAL_SIGNATURE_KEY_USAGE |
            Crypto.XCN_CERT_NON_REPUDIATION_KEY_USAGE |
            Crypto.XCN_CERT_KEY_ENCIPHERMENT_KEY_USAGE |
            Crypto.XCN_CERT_DATA_ENCIPHERMENT_KEY_USAGE);
        cRequest.X509Extensions.Add(cKUsage);

        var valOid = createObject('X509Enrollment.CObjectId');
        valOid.InitializeFromValue('1.2.643.3.6.0.12');
        var cEUsage = createObject('X509Enrollment.CX509ExtensionEnhancedKeyUsage');
        cEUsage.InitializeEncode(cCObjectIds);
        cRequest.X509Extensions.Add(cEUsage);

        var cEnrollment = createObject('X509Enrollment.CX509Enrollment');
        cEnrollment.InitializeFromRequest(cRequest);
        var request = cEnrollment.CreateRequest(Crypto.XCN_CRYPT_STRING_BASE64);