Steve, I would not hold myself up as a specialist on X509, more someone with a few wounds, but ... > The latter 'GlobalSignCertificateChain.pem' file contains the following > certificates, in this order: > > GlobalSign Root CA > GlobalSign Primary Secure Server CA > GlobalSign Server Sign CA Have you tried generating a PEM file with them in the other order?