1 go to cacert.org

2 login, validate email and generate client cert

3 backup client cert from firefox

4 openssl pkcs12 -clcerts -nokeys -out mikael@karlsson.com.crt < mikael.karlsson.com.p12 (enter password from step 3)

5 publish .crt

6 remove *.p12 from step 3