> Are these fields being used by anyone? Yes, URIs are used by WebID <http://www.w3.org/2005/Incubator/webid/spec/>. Lack of support for URI subjectAltNames in certtool is why I'm currently reliant on OpenSSL. -Toby