the CA certificate part of the CA database, and combined with
'unique_subject=no', it should make operations like CA certificate
roll-over easier.

Submitted by: Damien Miller <djm@mindrot.org>

This allows intermediate CAs to be created more easily.

PKCS12_create() now checks private key matches certificate.

Fix typo in x509 app.

Update docs.

New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.

New -pkcs12 option to CA.pl.
Document CA.pl script.
Initialise and free up the extra DH fields
(nothing uses them yet though).

set the #! line with the path to Perl.

Submitted by: Peter Jones

Submitted by: Sylvain Robitaille <syl@alcor.concordia.ca>

bug in the original but is otherwise just as horrible :-)