> Check that the clocks are synced on all the machines involved, including > the signing machine. Found the mistake - instead of thinking when signing the cert, I used the history, which somehow had the "sign-server" instead of "sign" ... :-/ After signing it correctly, it (of course) worked just fine ... Sorry & tnx ... -garry