hi, I note you are not using the root.crt file for the CA_file. I've found that using the pem often causes issues depending on how the cert was generated. also, did you use the XP extensions with your certificate as per the docs? alan