The main change of the version is the transfer from automatic renewal of internal certificates before their expiry to controlled renewal of certificates through manually generated request for renewal, which is signed with the original certificate. For additional information, see the Certificate renewal request.

Within the issuing of external certificates when registering a renewed external certificate, the generated request is signed using the original certificate, similarly to the request for internal certificate. For additional information, see the External certificate registration.