Unless I'm misunderstanding the extension idea, this would limit the programmer to converting while doing a lookup. My original design allows the programmer to capture the return of the conversion and use it later, such as to do name matching in PKIX validation. --Paul Hoffman