bcurtis I found the answer: openssl verify -purpose any -CAfile ca.crt client1.crt this responded with OK