> Well the first embedded SEQUENCE is the tbsCertificate data. You > need to hash > all of that including the SEQUENCE tag+length bytes.
This is correct. My previous statement that you don't include the tag and length bytes was incorrect. Sorry. DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]