<h3 id="getting_certs">Installing Certificates</h3>
<p> The simplest thing to do is go to the <a href="https://ca.mit.edu/ca/">usual web interface</a> and follow the instructions to install certs normally.
You may also want the <a href="http://ca.csail.mit.edu/cacert">CSAIL CA</a> (specifically, the Master CA).
<h3 id="getting_certs">Installing Certificates</h3>
<p> The simplest thing to do is go to the <a href="https://ca.mit.edu/ca/">usual web interface</a> and follow the instructions to install certs normally.
You may also want the <a href="http://ca.csail.mit.edu/cacert">CSAIL CA</a> (specifically, the Master CA).
Failing that, the next easiest way to install a client cert in the nss database is simply to install it on Firefox;
At that point, it should be in the list of certificates you get when you run "certutil -d sql:$HOME/.pki/nssdb -L".
Failing that, the next easiest way to install a client cert in the nss database is simply to install it on Firefox;
At that point, it should be in the list of certificates you get when you run "certutil -d sql:$HOME/.pki/nssdb -L".