Has anyone got any example of the use of the -cacert flag?

I'm pretty sure I am using it correctly with a pem encoded cert
but I'm not sure what the expect in the verify result. I keep getting

* Verify result: 10

Which according to the openssl verify man page means:

10 X509_V_ERR_CRL_NOT_YET_VALID: CRL is not yet valid

Which doesn't make much sense.

Cheers

Paul

-- 
         Paul Harrington              ___________________________________
   Independent Internet Limited      /       Phone:  07779 622683
  Internet * Security * Unix * NT   /        Fax:    0870 2841627
___________________________________/       URL http://www.comms.net