Convert from PEM to DER (via the X509_PEM_read_xxxx funtions) and use X509_cmp. PEM format is not guaranteed – you could have differnet linebreaks, for example. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users