- Instant provisioning - Client IP address is forwarded to application as X-Forwarded-For - Better validation of certificate files - Rollback of certificate changes