When debugging policies it would be great to see what the policy module has managed to decode the CSR into, without having read all the c# code, im assuming that the csr in its entirety is serialized in some way shape or form, being able to view the whole serialized csr with its properties would make it alot easier to create policies which mapped the intended target audience.

I am yet to see any other event ids other than event id 5. I have enabled CA loglevel 5, but I still dont get any exceptions or errors logged. I would expect (see #71) to be flagged as an error. Other directory errors I have encountered which i more or less expect an error event on;
Directory query (&(userPrincipalName=myuser@mydomain.com)(objectCategory=user)) in LDAP://mydomain.com/OU=People failed because 0x80072020 (-2147016672): An operations error occurred.