How can I set openssl.conf to make a CA that can issue only e-mail certificate valid for Netscape and IE? What correlation is there between keyUsage and nsCertType? Thanks. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]