Stephen answered this issue. The X509_get0_extensions() function does now seem to be documented. Closing this ticket. Matt -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4177 Please log in as guest with password guest if prompted