[Fedora-directory-users] questions on ssl and certutil

hi i have ssl enable in my directory server and it works fine i use redhat documentation to do that with certutil but i have a few questions for a good understanding of ssl in fds 1) i have two files slapd-myserver-cert8.db and slapd-myserver-key3.db are they the key and self-signed certificate for directory server , or are they files ( databases ) where thoses key and certificates are stored 2) i want to enable ssl in fedora console and in redhat documentation i have to generate new certificates . How can i use first certificate to signed this new ( if i do 4 5 and 7 step in redhat documenation i got an error , but i m not sure of the syntax i have to use ) , how can i generate clients certificate , how can i generate new server certificate ? i find redhat documentation not very clear for this subject ( but so clear on many others :) if someone can explain me exactly how it works and how to generate new certificates thanks basile