Things like (on page 8): (cn=ns1.foo.net) (cn=ns.bar.com) (cn=named.acme.org) Probably better get changed to something aka: (cn=ns1.example.net) (cn=ns.example.com) (cn=named.example.org) There is more if this type of things in the doc I believe. Thanks, Bert