>unknown option -next_serial I got this because I got CA.pl from a version of openssl-0.9.7e+ My system openssl, however, was a previous version, so didn't support this option. Solution: Either use an older version of CA.pl or update the system openssl. F