The documentation shows that the subj option to supercede the DN in the CSR can be used in CRL mode. 1. Can I use it in the normal CSR => CRT certification mode ? 2. How do I specify this option ? Would [ CN=xxx,[EMAIL PROTECTED] ] do ? Thanks, Sandipan ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]