Hi Michal, > Ideally I would just add that hash to the x509 as an extra field and > have the best of both worlds (and possibly the fuid as well). One small additional question here - does the solution that you have now satisfy this, or did you want the information in some other log-file (e.g. ssl.log)? Johanna