Hello again, Heres what im doing to revoke a cert and create a CRL:- Openssl ca -revoke server.pem -config ca.cfg : to revoke the certificate Openssl ca -gencrl -config ca.cfg -out ca/crl/crl.pem - crldays 1 : to create the CRL Now This is the output I get when I run the command , openssl crl -in crl.pem -text -nout :- Certificate Revocation List (CRL): Version 1 (0x0) Signature Algorithm: md5WithRSAEncryption Issuer: /C=US/O=XYZ Corp./OU=Research Dept./CN=XYZ Authority Last Update: Jan 14 12:27:42 2001 GMT Next Update: Jan 14 16:27:42 2002 GMT No Revoked Certificates. Signature Algorithm: md5WithRSAEncryption <blah blah blah> My question is regrads to the No Revoked Certificates. Section of the output, does this mean I haven't revoked any certificates? If so have I mixed up the order of the revoking the certificate? How would I get at the subject information stored inside the CRL? Thanks for your continued help guys Evan Get your own zoom email - click here - http://www.zoom.co.uk/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]