Guys, read the bloody documentation that is provided with your Apache/SSL product more thoroughly .... It's all in there. <http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49> It's all spelled out in gory detail. =Apollyon=