hmm...  need to rething how we handle ns2link and issuer in 2.1