You might want to read books about PKI and you also probably want to read this http://www.openssl.org/docs/apps/CA.pl.html BTW, this is a wrong mailing list for this kind of questions. Best, Aleksey