3.1.1.1.4 No (Anonymous) Authentication
If no authentication is provided at either the transport layer or the message layer, the request is considered to be anonymous. Anonymous authentication is supported only for renewal requests, where the signature from the existing certificate on the request object serves as authentication for the X.509v3 Security Token requestor.