from my experience, Firefox(which bundles it’s own certs) is a pain to deal with.