Hi Nils Thank you for your reference info. It helps!
Well, BTW do you know if Apache +mod_ssl can read "CRL Distribution point"? Accrding to the openssl.txt, Few software package interprets this extension, Apache use openssl actually I am not sure if there is any way to make Apache recognize this field of a client certificate. Thank you. Takeo ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]