I copied and pasted the example found here: http://www.php.net/openssl_csr_new And this one too: http://www.php.net/manual/en/function.openssl-pkey-new.php And I get the output that looks like valid 'gibberish' for all three (CSR, Cert, PK), except what concerns me is that I get fifteen of the same (completely useless and unhelpful) errors too?! while (($e = openssl_error_string()) !== false) echo $e . "<BR>\n"; error:0E06D06C:configuration file routines:func(109):reason(108) ... Snip the other 13 of these ... error:0E06D06C:configuration file routines:func(109):reason(108) Google doesn't return a single hit for that error message!? I tried this "trick" to 'clear' the error buffer prior to my cert generation, but no luck. http://www.php.net/manual/en/function.openssl-error-string.php I'm using PHP v5.0.3 on linux. This program makes use of the Zend Scripting Language Engine: Zend Engine v2.0.3, Copyright (c) 1998-2004 Zend Technologies with Zend Extension Manager v1.0.9, Copyright (c) 2003-2005, by Zend Technologies with Zend Optimizer v2.6.0, Copyright (c) 1998-2005, by Zend Technologies # openssl version OpenSSL 0.9.7d 17 Mar 2004 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php