Now fetch both official CAcert certificates (root and class 3) and put both This is the best option if you want to be able to login with and without a certificate..