Just to let everyone know, I took the 'short cut'. I used the TinyCA2 that was on DAGs repo. It installed, pulling quite a number of perl stuff with it. It is running, as so far I have created my first root cert. Problem I have is I **WORK** on the PKIX workgroup in the IETF and contributed to the Fed PKI and the new BioPharma SAFE PKI. So now that I can cut loose creating certs, I am busy overthinking all I can do with them. Sheesh, get a life! :-P