DKG, any chance you can refresh your 1.0.2 patch? I'm interested in being able to accept the common names but not changing the output for compatibility.. -- Rich Salz, OpenSSL dev team; rsalz at openssl.org