2015-12-13 20:27 GMT+01:00 Viktor Dukhovni <openssl-users at dukhovni.org>: > > This is both wrong and irrelevant. The OP should proceed as instructed. > OpenSSL's CAfile feature reads multiple certificates from a single file. Exactly that is the point. Only "linux based" tools will be able to read such a pem file. Windows certificate tools are not able to do so. And we don't know on which client OP will have to use that pem file, thus give advise that works on all clients, not just OpenSSL or GnuTLS or whatever.