From: krc@mailhost.rsn.hp.com
Sent: Tuesday, January 04, 2000 9:31 AM
To: Info-VAX@Mvb.Saic.Com
Subject: Re: verisign root certificate expiration, older browsers, VMS

I was able to update my Netscape verisign root certificate, the toughest part
was figuring out which old ceritificate to delete first. You have to 
remove the old one of the same name before you can install the
new one. My browser now will work with schwab, brown&co, etc.
but I now get a database error when trying to connect to etrade.
I not sure why etrade doesn't work, like schwab, it uses the verisign root
certificate. This might be the reason the url for updating the
verisign certificate is hidden.

The URLs that I found for adding/updating root certificates are:

http://www.entrust.net/customer/generalinfo/import.htm        entrust
http://www.equifaxsecure.com/servercert/rollover.html         thawte
https://www.verisign.com/server/prg/browser/root.html         verisign

Save off your old certificate files first, though if you restart 
netscape without any it will recreate them. Entrust is the easiest to
do since you don't have to delete any old certificate, verisign
is the hardest.

Ken 

krc@fc.hp.com