barrykfl at gmail.com wrote: > i want to extract the private key of the self sign cert The CA's database is in either /var/lib/pki/pki-tomcat/alias or /var/lib/pki-ca/alias depending on your version and distro. I would not recommend doing anything with it directly. rob