> The CITI group at UMichigan also has a project that allows you to > use a Kerberos service ticket to obtain an X.509 certificate with > the same lifetime as the Kerberos ticket. See http://www.kx509.org for details.