I've been digging around all morning in the header files and source for openssl and could not find an easy way to get what I need out of an 'X509 *' object. I need the full subject DN of the certificate, and the DER encoded X509 certificate itself (and its length). ie: what you would find in the userCertificate field in an LDAP directory. If anyone could point me in the right direction, I would appreciate it. The closest I could find to getting the full subject cert was X509_NAME_print to a BIO_s_mem() object. But none of the sample apps or documentation that I could find showed examples of using BIO_s_mem() :) Thanks, -Bill P. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]