Bazsi wrote:

e.g. put the intermediate CA certificates in the directory pointed to be self.client_ca_directory, named by the hash value of their subject name (openssl x509 -hash)

Testing with our box, seems like it's working, the -showcerts is showing both certificates now, thanks again! You're the best! Dave