The current end-entity definition tells that a relying party is an end-entity. I believe that the concepts of end-entity and relying party should not be intermixed. A relying party may not have a certificate of its own I have issued a Defect Report 365 (see http://www.x500standard.com/uploads/Ig/DR_365.pdf) on the matter. Please check to see if you agree. Erik Andersen Andersen's L-Service Elsevej 48, DK-3500 Vaerloese Denmark Mobile: +45 2097 1490 e-amail: era@xxxxxxx Skype: andersen-erik http://www.x500.eu/ http://www.x500standard.com/ <http://dk.linkedin.com/in/andersenerik> http://dk.linkedin.com/in/andersenerik