>>>>> "Ron" == Ron Ramsay <Ron.Ramsay@OpenDirectory.com.au> writes: Ron> Except that the NR bit cannot be added to the certificate by the Ron> application! When I said "put it in the application" that also meant "put it in the application protocol", i.e., not in the cert. paul