>
certutil: could not decode certificate: SEC_ERROR_REUSED_ISSUER_AND_SERIAL: You
are attempting to import a cert with the same issuer/serial as an existing
cert, but that is not the same cert.
Ah, now I see it - it's ISSUER/Serial, not CN/Serial; and since we have a
self-signed root CA it's serial matters
Thanks for the clarifiction - I somehow overread that in the original
startements