The same problem and solution are described in the other CSR for ML-KEM keys at https://bugs.openjdk.org/browse/JDK-8349163.
Comments
Moving to Provisional, not Approved.
[~mullan], please review this request.
Is there somewhere in the documentation where the format should be specified?