Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In ubuntu, I recently installed a client certificate in google chrome, and now I want to export it to other browsers. I installed the libnss3-tools package, but can't find the export option for certutil.

share|improve this question
It would help others if you tagged this with the Operating System you are referring to here. – Helvick Feb 7 '10 at 12:13
up vote 4 down vote accepted

The command is

pk12util -o certfile.p12 -d sql:$HOME/.pki/nssdb -n <certificate's name>

The certificate's name is obtained running

certutil -d sql:$HOME/.pki/nssdb -L
share|improve this answer

I had to do this to get my cert out of Google Chrome in Linux. I could then import the cert into Firefox and all is well.

$ pk12util -o certfile.p12 -d sql:$HOME/.pki/nssdb -n "StartCom Free Certificate Member's StartCom Class 1 Primary Intermediate Client CA ID"
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.