Hehe - I just can't help but worry just how much of what I do (as a computer programmer) "looks like" nothing at all. You spent two days figuring out that Tomcat expects (but doesn't document) client-side certificates names to be in "CN=x, OU=y, O=z" format instead of the "O=z/OU=y/CN=x" format that OpenSSL reports them in? Wait a minute, I thought you were a programmer, you're supposed to know this stuff already!