Thanks, I changed my strategy : one file programmatically modified and added to the site-enabled folder like that everything runs fine and I keep being able to meet my requirement of one root ca per client. Many thanks all of you Bye Posted at Nginx Forum: http://forum.nginx.org/read.php?2,246178,246205#msg-246205