Description: Installing your shiny new Certificate Authority certificate to client browsers is just a click away. In order for your client browsers to trust your new Certificate Authority, they must be configured to accept your CA's public key. There are two possible formats that browsers will accept for new certificate authority certs: pem and der. You can generate a der from your existing pem with a single OpenSSL command: