It certainly would be great to have a repository of "reference" X.509 certificates.... As an aside: does anybody know how to "read" the Netscape certificate "db" used by Navigator? There are few, albeit simple, test certificates right there. Any pointers into that direction would be appreciated. Carl Binding