Actually, I did download and run his CA builder. The resulting CA class shows the exact same problem. I'm going to keep working on it.

Thanks,

Ben