1. In section 4, the OID presented and encoded in this section is incorrect. The OID that is encoded here needs to be id-seedCBC not id-npki-app-cmsSeed-wrap. Jim