#include <windows.h>
#include <certenroll.h>

int main() {
    HRESULT hr = CoInitialize(NULL);
    if (FAILED(hr)) {
        // 错误处理
        return 1;
    }

    // 创建证书请求对象
    CComPtr<IX509CertificateRequestCertificate> pCertRequestCert;
    hr = pCertRequestCert.CoCreateInstance(CLSID_CX509CertificateRequestCertificate);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 设置证书请求证书的属性，比如有效期、密钥用途等
    CComPtr<IX509ExtensionKeyUsage> pKeyUsageExtension;
    hr = pKeyUsageExtension.CoCreateInstance(CLSID_CX509ExtensionKeyUsage);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 设置密钥用途扩展的属性
    hr = pKeyUsageExtension->Initialize(X509KeyUsageKeyEncipherment | X509KeyUsageDigitalSignature);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 将密钥用途扩展添加到证书请求证书对象中
    hr = pCertRequestCert->InitializeFromPrivateKey(XCN_CRYPT_STRING_BASE64, L"YourPrivateKeyBase64String", L"YourPrivateKeyPassword");
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 将密钥用途扩展添加到证书请求证书对象中
    hr = pCertRequestCert->get_CertificateExtensions()->Add(pKeyUsageExtension);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 获取证书请求证书的原始数据
    CComBSTR bstrCertRequestCert;
    hr = pCertRequestCert->Encode(&bstrCertRequestCert);
    if (FAILED(hr)) {
        // 错误处理
        CoUninitialize();
        return 1;
    }

    // 在这里可以对证书请求证书的原始数据进行进一步处理

    // 释放资源
    pKeyUsageExtension.Release();
    pCertRequestCert.Release();

    CoUninitialize();
    return 0;
}