On 08/03/11 13:01, Rudolph Bott wrote: > Tue Mar 8 13:09:48 2011 : Error: --> verify error:num=36:unhandled > critical CRL extension This comes out of OpenSSL. OpenSSL can't parse your CRL. You may need a newer version of OpenSSL; what does: openssl crl -text -noout -in <thefile.pem> -inform pem ...say?