Christian Paquin reported a bug in the CML. The bug was in basicConstraints processing when the intermediate certificate does not have a basicConstraints extension, no error was reported. The fix for this problem will be posted to the CML web site <www.getronicsgov.com/hot/cml_lib.htm> later today. Thanks Tex