Since I have now found three different occurences of an ASN structure called CertID (CMP is the first), please change the CertID in the ESS document to ESSCertId to make it unique. Thanks jim schaad