Voir aussi :

• Infrastructure de Gestion de Clefs
• Mod_SSL

• http://huddledmasses.org/code-signing-with-openssl-and-powershell/
• http://www.top20toolbar.com/misc/codesigncert.htm

• http://isc.sans.edu/diary.html?storyid=8686

 openssl s_client -connect isc.sans.org:443

On this page you'll find how to create only one file which contains your certificate and others chain certificates (Concatenate them in one), like, I think, you could have only one configuration directive to use : the CertificateFile, and to not need the CertificateChainFile anymore :

http://help.globalscape.com/help/eft5/admin/certificate_chaining.htm

http://www.fil.univ-lille1.fr/~wegrzyno/portail/PAC/Doc/TP5/tp-certif002.html

  # Génération des clés
  openssl genrsa -out maCle.pem 1024
  # Exportation de la partie publique
  openssl rsa -in maCle.pem -pubout -out maClePublique.pem

Afficher les données d'un CSR:

openssl req -in theCertificateSigningResquest.csr -noout -text

Afficher les données d'un certificat encodé PEM:

openssl x509 -in theCertificate.crt -noout -text