> It's fine - I think we're talking at slightly crossed purposes though; I don't want > the prefixes, I was just hoping to be able to get rid of them automagically > during a renewal (like we did for getting rid of the email addresses a while > ago), rather than applying for new ones which is slightly faffier. That would be nice, but the effort to support auto-removing them could be more code than actually permitting the things! We made that effort across our various s/w components for the email removing since that was many hundreds of certificates, but there are a lot fewer of these. > It is, however, only slightly faffier, and it's a one-time thing, so I'm just going to > get on with it, and then it'll be done. Agreed it is a one-time thing and the extra faff is probably that instead of selecting a cert with the correct DN you have to cut+paste it into a form from elsewhere. Approval, etc is similar. Cheers JK -- Scanned by iCritical.