[Fedora-directory-users] questions on ssl and certutil

[basile au siris]

hi

i have ssl enable in my directory server and it works fine
i use redhat documentation to do that with certutil
but i have a few questions for a good understanding of  ssl in fds

1) i have two files slapd-myserver-cert8.db and slapd-myserver-key3.db
are they the key and self-signed certificate for directory server   , or 
are they files  ( databases )
where thoses key and certificates are stored

2) i want to enable ssl in fedora console and in redhat documentation i 
have to
generate new certificates . How can i use first certificate to  signed 
this new   ( if i do 4 5 and 7 step in redhat documenation i got an 
error , but i m not sure of the syntax i have to use ) , how can
i generate clients certificate , how can i generate new server 
certificate  ?
i find redhat documentation not very clear for this subject ( but so 
clear on many others :)

if someone can explain me exactly how it works and how to generate new 
certificates
thanks
basile