I have tried everything I can think of, and even though I have certificates that are marked as "valid" when I look at the lock icon for an https: site, I get a verification "fail":

CERT: Pre-verification error: self-signed certificate in certificate chain

From everything I have read, my understanding is that every chain of certificates starts with a self-signed certificate

I have even queried my Windows certificate management, and the issuer of the certificate is Entrust, which is on the list of trusted issuers.  Within openssl, I get the same error:

error 18 at 0 depth lookup: self signed certificate

There is talk of a CApath, as well as lists of trusted issuers, but I do not understand anything within the documentation for stunnel which suggests how to access this information and incorporate it in the functioning of the program.
Any help would be much appreciated!
Thanks in advance
-William Wood