Do you have your own CA? Need to distribute your CA public key to client browsers? Here's how: Distributing Your CA to Client Browsers - Installing your shiny new Certificate Authority certificate to client browsers is just a click away In order for your client browsers to trust your new Certificate Authority, they must be configured to accept your CA's public key. There are two possible formats that browsers will accept for new certificate authority certs: pem and der. You can generate a der from your existing pem with a single OpenSSL command: " [OnLamp]