I just want to post a message that I found a bug in pkinit.c when it constructs the AS-REQ . It failed to add the signature in the SingerInfo. Cheers, Henry