have you tied with both CAs in chain or by defining/using the cert directory with all certs in there? alan