This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

সহায়তা খুঁজুন

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

আরও জানুন

How to export/extract a client certificate from FF mobile?

  • 1 উত্তর
  • 1 এই সমস্যাটি আছে
  • 15 দেখুন
  • শেষ জবাব দ্বারা tuxflo

more options

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command:

certutil -K -d sql:.

shows Something like:

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID

Now I know that I must use pk12util to extract the key, but the command:

pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:.

Shows the following error:

pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library

Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

I set up an account for StarSSL from my Android device and a client certificate was downloaded/installed to the mobile Browser. Now I tried to backup this cert to my Desktop Pc. After searching a lot about this I found out how to copy the cert9.db and key4.db files to my PC but now I don't know how to extract the certificate out of the files. Using the command: certutil -K -d sql:. shows Something like: certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa <some long letter/number ID> <my Email address>'s StartCom Ltd. ID Now I know that I must use pk12util to extract the key, but the command: pk12util -o ~/cert.p12 -n "<ID from above>" -d sql:. Shows the following error: pk12util: find user certs from nickname failed: PR_LOAD_LIBRARY_ERROR: Failure to load dynamic library Thanks a lot for helping and keep on the good work with Firefox mobile (and Desktop) Greetings, tuxflo

সমাধান চয়ন করুন

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.

প্রেক্ষাপটে এই উত্তরটি পড়ুন। 👍 0

All Replies (1)

more options

চয়ন করা সমাধান

Solved it by my own, the solution is not to enter the ID from the certutil command, instead use the Name of the certificate: pk12util -d sql:. -o out.p12 -n "<mail_address> StartSSL Ltd. ID" after entering the password twice I had the certfile out.p12 in the current directory and could Import it to my Firefox on my Desktop machine.