Hello, I did find a command "openssl ca -revoke ca.db.certs/01.pem". However I am back to my original problem: -------------------------------------------- error 18 at depth 0 depth lookup: self signed certificate error 7 at 0 depth lookup: certificate signature failure -------------------------------------------- Does this mean that my certificate did not get signed? After all it is a self signed certificate? regards, Tony - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html