--- a/cryptoservices/certificateandkeymgmt/x509/x509cert.cpp	Tue May 25 14:37:45 2010 +0300
+++ b/cryptoservices/certificateandkeymgmt/x509/x509cert.cpp	Wed Jun 09 11:39:05 2010 +0300
@@ -1338,10 +1338,10 @@
 	return KeyIdentifierL();
 	}
 
-EXPORT_C TKeyIdentifier CX509Certificate::SubjectKeyIdL()
+EXPORT_C TKeyIdentifier CX509Certificate::SubjectKeyIdL() const
 	{
 	// if it is a v1 or v2 type then there is no way of knowing which is a CA, treat all certs as CA as done in the certificate recognizer.
-	if (Version() != 3 )
+	if (Version() < 3 )
 		{
 		return SubjectKeyIdentifierL();
 		}