I found a very nice website full of all sorts of useful certificate and OpenSSL information and guides: http://www.gagravarr.org/writing/openssl-certs/ I don't know if this site will answer your problem, but take a look. Andy