Steve, there can be V2 CRLs in BCI (BrandCRLIndentifier) Distribution message, encoded as PKCS7 Signed Data container. One can look at http://www.mastercard.com/ca Unfortunately I didnt parse that message with SETREF and didn't complain yet; my fault. It is a sequence with CRLs that failed to decode :( Vadim Fedukovich ... > Do you (or anyone else for that matter) happen to have an example of a > CRL with extensions you could send me? It would really help if I have > something to test this on. I currently don't have any sample V2 CRLs. > > Steve. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]