On 18 Mar 2019, at 12:51, Graham Leggett <minfrin@xxxxxxxx> wrote: >> which has a non-zero length signature algorithm OID (l = 9). Your >> example has "l=0" where one would expect the signature OID after >> the extensions. > > How do I fix openssl to parse this as it did before? I've raised this at https://github.com/openssl/openssl/issues/8514 to give more context. Regards, Graham —