I think we need a few more words to describe what this is for.

Do we talk about generation numbers explicitly somewhere in our docs?  It might be good to add an "extended attributes" section somewhere to describe the extra niceties in our certs (as follow-up PR obviously)