Hello,
Thank you for posting in our TechNet forum.
After my research, the TRUSTED CERTIFICATE variant is an OpenSSL-specific format which includes "trust rules" appended to the certificate. This is used by the OpenSSL trust engine to determine if the presented end-entity certificate is valid for its current usage.
For more information, we can refer to the following link.
https://www.openssl.org/docs/man1.0.2/man1/x509.html
And in my lab (Windows), after I generate a csr file, I can see it begins with "-----BEGIN NEW CERTIFICATE REQUEST-----".
Tip: This answer contains the content of a third-party website. Microsoft makes no representations about the content of these websites. We provide this content only for your convenience.
Best Regards,
Anne