Hi, I use sslbump with squid 3.4.6 and it works fantasic with the most websites. But there are some sites like www.ferrari-electronic.de which don't provide the intermediate certificate. There is a authority information access extention, which defines a way the browser can download the intermediate certificate on it's own. Is there any option to enable this behavior in squid, so squid can validate a the certificate where the intermediate certificate is missing ? Thank you for your help ! -- Regards Dieter Bloms -- I do not get viruses because I do not use MS software. If you use Outlook then please do not put my email address in your address-book so that WHEN you get a virus it won't use my address in the >From field.