There are 3 resource types defined in the OpenSSL module. The first one is a pkey (public or private key) identifier, the second one is a X509 certificate identifier and the third one is a CSR (certificate signing request) identifier.