It seems that McDonnell Douglas has patented the date "windowing" that is used to get around Y2K problems: http://news.cnet.com/news/0-1009-200-1426450.html Since PKIX requires windowing UTCTime in certs, this may violate the patent (note: I don't know anything about anything, especially patents). Marc