On Thu, Oct 31, 2013, at 02:31 PM, Peter Saint-Andre wrote: > I got it here: > > https://www.digicert.com/digicert-root-certificates.htm
Ok, that's the same as me. But its in DER format, whereas s_client is expecting -CAfile to be PEM. Try: $ openssl x509 -in DigiCertHighAssuranceEVRootCA.crt inform DER -out DigiCertHighAssuranceEVRootCA.pem -outform PEM Then use the .pem and see if you get the same result as me.
