diff --git a/ChangeLog b/ChangeLog
index 911950d..a6617a6 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,18 @@
 Easy-RSA 3 ChangeLog
 
+3.0.3 (2017-08-22)
+    * Include mktemp windows binary
+    * copy CSR extensions into signed certificate
+
+
+3.0.2 (2017-08-21)
+    * add missing windows binaries
+
+
+3.0.1 (2015-10-25)
+    * correct some packaging errors
+
+
 3.0.0 (2015-09-07)
 
     * cab4a07 Fix typo: Hellman
diff --git a/build/build-dist.sh b/build/build-dist.sh
index dca4b9a..4b63841 100755
--- a/build/build-dist.sh
+++ b/build/build-dist.sh
@@ -67,7 +67,7 @@ stage_unix() {
 	mkdir -p "$DIST_ROOT/unix/$PV"
 	
 	# Copy files into $PV, starting with easyrsa3 as the initial root dir
-	src_files="easyrsa3/ Licensing/ COPYING ChangeLog README.quickstart.md"
+	src_files="easyrsa3/ Licensing/ COPYING.md ChangeLog README.quickstart.md"
 	for f in $src_files
 	do
 		cp -a "$SRC_ROOT/$f" "$DIST_ROOT/unix/$PV" || die "failed to copy $f"
@@ -94,7 +94,7 @@ stage_win() {
 	
 	python -m markdown $SRC_ROOT/README.quickstart.md > $DIST_ROOT/windows/$PV/README.quickstart.html
 	# Copy files into $PV, starting with easyrsa3 as the initial root dir
-	src_files="easyrsa3/ COPYING ChangeLog"
+	src_files="easyrsa3/ COPYING.md ChangeLog"
 	for f in $src_files
 	do
 		cp -a "$SRC_ROOT/$f" "$DIST_ROOT/windows/$PV" || die "failed to copy $f"
@@ -112,7 +112,7 @@ stage_win() {
 	done
 	
 	# create bin dir with windows binaries
-	cp -R "$SRC_ROOT/distro/windows/bin" "$DIST_ROOT/windows/$PV/" || die "failed to copy bin"
+	cp -v -R "$SRC_ROOT/distro/windows/bin" "$DIST_ROOT/windows/$PV/" || die "failed to copy bin"
 
 	# files not included
 	rm -rf "$DIST_ROOT/windows/$PV/doc/TODO" || die "failed rm TODO"
diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 8ec7adf..c0e0763 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1066,7 +1066,6 @@ Note: using Easy-RSA configuration from: $vars"
 	set_var EASYRSA_TEMP_FILE_3	""
 	set_var EASYRSA_REQ_CN		ChangeMe
 	set_var EASYRSA_DIGEST		sha256
-	set_var EASYRSA_CP_EXT		0
 
 	# Detect openssl config, preferring EASYRSA_PKI over EASYRSA
 	if [ -f "$EASYRSA_PKI/openssl-1.0.cnf" ]; then