Heads up: CSR (SSL?) needed for verification

This is more of a “I found this out, so keep an eye out for it”. Domain provider Network Solutions has requested a copy of the CSR for the SSL from my client. From my understanding, we don’t have access to this on our end, and I don’t know how to generate it, so I reached out to support.
But if anyone else is with / has a client with Network Solutions, keep an eye out, because that might be coming up. (I have a sneaking suspicion that they’re trying to sell SSLs of their own, but I don’t have access to use a custom SSL cert via enterprise, so fingers crossed we don’t need to go down that route.)
Anyone else run into this yet?

I suspect your client is confused- AFAIK the CSR is only used to issue the SSL cert, so somehow the client has initiated an SSL cert purchase process.

They obviously don’t need that on a WF hosted site.