>[Critical extensions] >Unless I am misreading something, this text is inconsistent.. The latter is >clearly the correct procedure, is it not? Ah, you've just discovered the X.509 critical extension rathole :-). For more information on this, you may want to look at http://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt. Peter.