Hi! In order to check the correct hostname during a connection it is necessary to extract the CommonName (CN) from the certificate. I have browsed through the examples and the library, but I didn't find a function to do so. Must I parse the X509_NAME_oneline myself? Or did I just miss the obvious. Unfortunately the documentation is not perfect, yet. Thanks in advance, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]