AttestationHashInput
Canonical DER structure authenticated by DataAuthentication.Hash.
It mirrors a TbsCertificationRequest while deliberately omitting its public key and the single attestation-proof attribute. toTbsCsr adds those two values after key generation; TbsCertificationRequest.toHashInput performs the inverse operation. This makes the mapping explicit and keeps hash construction aligned with the actual TBS CSR.