hello... maybe someone had this problem before... if i generate a selfcerted key by keytool -genkey -alias myKEY -keyalg RSA create a certrequest by keytool -certreq -alias myKEY -file REQ.pem sign it by openssl -ca -in REQ.pem -out CERT.pem try to import it into keystore by keytool -import -alias myKEY -file CERT.pem i get !!!!!!!!!!!!! keytool error: java.security.cert.CertificateException: IOException: Sequence tag error if i convert the cert format by openssl -x509 -in CERT.pem -out CERT.der -outform DER i get !!!!!!!!!!!!! keytool error: java.lang.Exception: Failed to establish chain from reply can anyone help? michael ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]