> How do we use `openssl req` and a CONF file to add the information > (assuming we already have the certified timestamps)? Ouch, that's gonna be nasty. Look at ASN1_generate_nconf.pod Most likely have to use the SEQUENCE type, recursively. Ouch indeed. A patch to let you specify the DER directly would be useful. -- Senior Architect, Akamai Technologies IM: richsalz at jabber.at Twitter: RichSalz
