I tried to use the function, gens = X509_get_ext_d2i(x509,NID_netscape_comment,NULL,NULL); just like the X509_get1_email() does to extract the value of the extension. but null returned. is it the right way to extract the netscape comment value out of the X509 cert? Thanks, Jason ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]