Paul, http://omnios.omniti.com/changeset.php/core/omnios-build/5950477f82479c22ca2b7082a6f489d6b3462b71 changes the build process for web/ca-bundle which Theo had already expanded to include the hashed cert files. We now obtain the cert data from the NSS source matching what we use to build system/library/mozilla-nss. Eric