Control over certificate generation is vested in a CSR parsing program. This is driven by a template system that manages the addition of new extensions and types and is subject to quality improvement. As CAcert operates a service oriented to free and experimental certificates, there is less emphasis on up-front technical documentation. A subscriber can simply roll a cert and inspect or test it. See CPS6.1 CPS6.1.7 7.1.2 need to be rewritten, to include ServerAlternateName extensions