On a slightly related note. I cannot seem to be able to retrieve notBefore and notAfter from an X509 cert. I suppose that would be a good thing to add, wouldn't it? (I found how to set them, but not how to retrieve them). Misa