Hi all, I have a dummy question about sub-Certified CA and so on. After having created my Root CA to sign users' certificate. I want now to sign Sub-CA certificate to accreditate this one for signing (possibly another Sub-CA certificate) users' certificate. Could someone give me an example of command to do that ? If I have my root-CA certificate pointed to ACert.pem, one or two sub-CA pointed to Bcert.pem and CCert.pem and user's one pointed to Ucert.pem. Here is hierarchilly the diagram. ACert.pem --> BCert.pem --> CCert.pem ------> Ucert.pem Is it also possible to cross-sign at the same level the Sub-CA certificate? If yes how to do that? In advance many thanks! Reards -- # .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .- # Averroes A. Aysha # Think Linux, Think Slackware! # Network Security Auditor (NSA) # e-fingerprint = 73B7 2559 2968 5094 3B95 5C70 4E85 5F94 6068 1DD8 # http://www.keyserver.net/en/ # .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .- ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]