Puppet users - Oct 2007 - some questions about Multiple Certificate Authorities

hello,guys
     follow the  guide from
http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities
.
     I use the SERVER1 CA as a puppetmater CA , it can sign client
csr, but can''t verify it . I''m not so clear about the x509,
who can
help me ? this document have some complex for me.


-- 
Huang Mingyou