Hello, My certificates are behaving fine. I came to know the mistake I am doing, from Dr. Stephen Henson's reply. I have not set the "digital signature" bit set in KeyUsage extension. Thank you to Stephen and all of you. Regards ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]