As part of a user issue, I ended up needing to drill into the OtherName value of the SubjectAltName field of an x509 cert. There does not appear to be public apis for doing this as the DER classes are implementation details under the sun.* package namespace. I'm sure I can get equivalents from bouncy castle, but I want to know what is the scope of the x509 cert processing routines we should be providing as part of the jbosssx spis. Can we gather those requirements here and translate those into a http://jira.jboss.com/jira/browse/SECURITY issue. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3980109#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...