> We have a webserver with an SSL self-signed certificate that uses our company > CA cert in its chain
I can't parse that -- either it's self-signed (usually only done by root CA's), or it's using an internal company CA. Can you post "x509 -text" for both certs? /r$ -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitter: RichSalz ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org