RFC 2459 state that the BC extension should not appear in EE certificates. Let me know why the BC extension should not appear in EE certificates. Is there any problem when cA in BC in EE certificates is set to false? Sungjin Lee SignKorea (http://www.signkorea.com) Korea Securities Computer Corp. Seoul, South Korea.