Check a CSR to see what paramaters were used when it was generated:

openssl req -in domain.csr -noout -text