On Mon, Apr 20, 2015, Salz, Rich wrote: > > > A patch to let you specify the DER directly would be useful. > > > > No patch required: > > Looks like a doc bug then. Err... https://www.openssl.org/docs/apps/x509v3_config.html#ARBITRARY-EXTENSIONS Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org