I wondered whether the problem lied in our openssl. It does not seem so. "openssl verify cert.pem" on my problematic certificate does print as expected: error 18 at 0 depth lookup:self signed certificate error 10 at 0 depth lookup:certificate has expired
Andreas
