perhaps this is a tinyCA problem... I have the following line in openssl.conf subjectAltName = email:copy, DNS:srv1.tobyhouse.com, DNS:www.tobyhouse.com, DNS:ldap.tobyhouse.com, DNS:mail.tobyhouse.com, DNS:webmail.tobyhouse.com isn't this the proper style for this information? Craig