How much of this is fixable with generating the right CSR and choosing the right CAs? Does "will need to at least choose their own random serial number, fill o

How much of this is fixable with generating the right CSR and choosing the right CAs? Does "will need to at least choose their own random serial number, fill out their own Issuer name and key" absolutely wreck it?