Using a modern ASN.1 encoder/decoder, I find that I am able to process an X.509v3 certificate in less than 200 lines of code - this includes signature verification and signing certificates. Not a big deal really, unless you prefer to write your own parser. Regards, Phil