actually doing "openssl s_client -proxy 192.168.1.35:3129 -connect <host:port> -showcerts ", noticed two of the three certs from that display is from the proxy server I think. the first one is the modified host cert. maybe that's the way to get proxy server's certs. thanks. George -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users