fix other default fields

      </xsl:otherwise>

     </xsl:choose>

    </subjectPermissions>

    <minChainLength>

    <xsl:choose>

      <xsl:when test="@minChainLength"><xsl:value-of select="@minChainLength"/></xsl:when>

      <xsl:when test="@minLength"><xsl:value-of select="@minLength"/></xsl:when>

      <xsl:when test="$certType = 'ROOT'">2</xsl:when>

      <xsl:otherwise>1</xsl:otherwise>

     <xsl:when test="@minChainLength and not(@minChainLength='1')">

       <minChainLength><xsl:value-of select="@minChainLength"/></minChainLength>

     </xsl:when>

     <xsl:when test="@minLength and not(@minLength='1')">

       <minChainLength><xsl:value-of select="@minLength"/></minChainLength>

     </xsl:when>

    </xsl:choose>

    </minChainLength>

    <chainLengthRange>

    <xsl:choose>

      <xsl:when test="@chainLengthRange"><xsl:value-of select="@chainLengthRange"/></xsl:when>

      <xsl:when test="@lengthRange"><xsl:value-of select="@lengthRange"/></xsl:when>

      <xsl:when test="$certType = 'ROOT'">0</xsl:when>

      <xsl:otherwise>0</xsl:otherwise>

     <xsl:when test="@chainLengthRange and not(@chainLengthRange='0')">

       <chainLengthRange><xsl:value-of select="@chainLengthRange"/></chainLengthRange>

     </xsl:when>

     <xsl:when test="@lengthRange and not(@lengthRange='0')">

       <chainLengthRange><xsl:value-of select="@lengthRange"/></chainLengthRange>

     </xsl:when>

    </xsl:choose>

    </chainLengthRange>

    <xsl:choose>

     <xsl:when test="@eeType = 'enrol' or @eeType = '40'">

       <eeType><xsl:text>01000000</xsl:text></eeType>