1. A minor performance regression for the OCSP service was fixed.
2. A process time parameter was added to OCSP transaction logging.
3. Usage of the optional IAIK PKCS#11 provider was... fixed and improved.
4. Sequence handling for EAC CVC CAs was improved.
5. A bug when renewing CA keys on HSMs was fixed.
6. A problem in which you could not use a dot in pre-set usernames in end entity profiles was fixed.
7. The possibility to install directly with an external admin CA was added.
8. The possibility to prompt for keystore password during install was added, so you never have to write it anywhere