Minor nit: Issuer vs. Issuer key ID

5.2.3.5 Issuer

should be:

5.2.3.5 Issuer key ID

A tiny point, I know, but it made it hard to find.

--
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff