A new version of the CERN-CA-certs package is available in the QA environment.
The new package removes the older certificates of the CERN Certification Authority. Please make sure to test your services and software with the new package.
Full details are available on the SSB entry: OTG0077330.

Skip Navigation Links.

Trust CERN Root Certificate with Mozilla

On Mozilla, the CERN Root certificate is not trusted by default, so CERN Certificates will not be verified correctly and cannot be used to authenticate.


The CERN Grid Certification Authority certificates are distributed through the CERN Grid Certification Authority Files and Documents site.

Verify CERN root CA certificate installation

Please note that Firefox doesn't give any confirmation message of the Root CA Certificate installation.

To verify that the installation was completed successfully, you should check the Certificate Manager:

  • From the main menu, select Tools -> Options
  • In the Options dialog, select Advanced -> Encryption -> View Certificates:
  • In the Certificate Manager dialog, select the Authorities tab and verify that the CERN Trusted CA and CERN Root CA certificates are present:

Import and export certificates using Firefox.

The instructions below refer to Firefox v. 54.0.1 (July 2017).
If you are using another version of Firefox, the procedure may differ.

Open Certificate Manager

In Firefox, click Options -> Advanced -> View Certificates:

The Certificate Manager windows will appear:

Import a certificate

  • In the Certificate Manager window, make sure that the "Your Certificates" tab is selected.
  • Click on the Import button.
  • Open the .p12 or .pfx file with your certificate.
  • Provide the private key password if needed.
  • You should now see the imported certificate in the list of installed certificates.

Export a certificate

  • In the Certificate Manager window, make sure that the "Your Certificates" tab is selected.
  • From the certificates list, select the certificate you want to export.
  • Click on the Backup button.
  • Select where you want to save the exported file.
  • Optionally, provide a password for the private key (recommended).
  • You should receive a confirmation message asying that your certificate and private key have been successfully backed up.

Created: 3/10/2020
Last reviewed: 5/2/2022