Hi, SSL handshaking with new_ssl will fail when a certificate contains attributes unknown to the public_key module. Here is a patch that leaves the attribute value encoded when its type is unknown. -Will