https://ssltools.websecurity.symantec.com/checker/views/csrCheck.jsp
You have 1 error
Your CSR contains a challenge phrase.
Adding a challenge phrase to a CSR is not a secure practice. Please generate a new CSR that does not contain a challenge phrase.

The problem occure while buying a cert from https://www.ssls.com/
The support reply with:
"Please regenerate it without the passphrase and try to activate the certificate once again."

- backported patches

- Directive snippets can now be made available to clients; clients can select an available directive snippet for a website - the appropriate snippet will then be written to the vhost configuration file. This is useful for example on nginx where clients have no access to the Options tab of a website.

Fixed a Bug in Centos 7 were php-fpm uses sockets while mod_proxy_fcgi in centos 7 does not support that yet.

- Fixed: FS#3710 - Bug with PHP-FPM configuration since 3.0.5.4 Patch 4
- Fixed wrong function calls in system lib.

-Added a new option "Network Filesystem" under System > Server config > Web to toggle on / off the _netdev option for the bind mounts in /etc/fstab

Note: The mod_proxy_fcgi that ships with CentOS and Ubuntu does not support sockets yet, so all php-fpm connections are done by IP.

Revert "Fixed: FS#3581 - Website unaccessible under some circumstances when using seo redirection *.domain to www.domain"

This reverts commit 5742e4c9.

Fixed: FS#3581 - Website unaccessible under some circumstances when using seo redirection *.domain to www.domain
(only for apache2, nginx still to do)

- Changed vhost.conf.master as php-fpm was not working after commit "5a6670bd".

[Sun Jun 01 18:52:24 2014] [error] [client 146.52.61.243] (13)Permission denied: FastCGI: failed to connect to server "/var/www/clients/client1/web2/cgi-bin/php5-fcgi-1.2.3.4-80-example.de": connect() failed
[Sun Jun 01 18:52:24 2014] [error] [client 146.52.61.243] FastCGI: incomplete headers (0 bytes) received from server "/var/www/clients/client1/web2/cgi-bin/php5-fcgi-1.2.3.4-80-example.de"

(nginx still missing)