hi, > request = xenroll.CreatePKCS10(DN, "1.3.6.1.5.5.7.3.2") taken from ./include/openssl/objects.h #define SN_id_pkix "PKIX" #define NID_id_pkix 127 #define OBJ_id_pkix 1L,3L,6L,1L,5L,5L,7L #define SN_id_kp "id-kp" #define NID_id_kp 128 #define OBJ_id_kp OBJ_id_pkix,3L ............................ ............................ ............................ #define SN_client_auth "clientAuth" #define LN_client_auth "TLS Web Client Authentication" #define NID_client_auth 130 #define OBJ_client_auth OBJ_id_kp,2L So I suppose that thanks to 1.3.6.1.5.5.7.3.2 (which is "TLS Web Client Authentication"), xenroll knows what to do. >Where can I find some documentation on this? ./include/openssl/objects.h ;) bye ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]