It works! Thank you! Aleksey > > $openssl genrsa -des3 -out ca.key 1024 > $openssl req -new -key ca.key -config aconfig.conf -out ca.csr > $openssl x509 -req -days 60 -set_serial -0001 -in ca.csr -signkey ca.key > -outform DER -out ca.cert >