For security reasons CSR and the private key are not stored and can not be retrieved. If the client didn't save either of those, for whatever reason, they will need to reissue the certificate again.