Unhandled Critical Extensions

Hi,

How does MOD_SSL call OpenSSL for the purpose of Certificate Verification? I
have a certificate which has the critical extension 'Name Constraints', when
I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL understands the
Certificate, however, when I present the cert to Apache, it fails with the
Error Message 'Unhandled Critical Extensions'

THis leads me to believe MOD_SSL calls OpenSSL in a different manner. Has
anyone any experience of this?


Diarmuid