- allows CAs to specify a naming format for auto ca identities - name collisions during auto enrollment now adds a six digit incrementing number