There are CAs which to this day have been caught issuing certs that don't match CSRs, because the CA uses a manual process of hand-copy or hand-typing fields fr

There are CAs which to this day have been caught issuing certs that don't match CSRs, because the CA uses a manual process of hand-copy or hand-typing fields from the CSR into the new certificate. So even reviewing CSRs won't help you. (The solution of course is to automate your cert request/issuance, which has the side effect of ensuring no human is involved in the cert process)