nice...its about time some nice debug output was provided to show what was being read and created. question, can we have an option to send the CA to the client as well (just for completeness, to ensure current capabilities (and to deal with older horrible clients) arent lost? I'll have to give v4 another go now :) alan