=== issue: "The certificate/key database is in an old, unsupported format." ===
<code>
[chris@спутник tmp]$ certutil -A /home/chris/fluxcoil.net_201404.cert \
   -n fluxcoil.net -t "p,p,p"
certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.
</code>

=== Solution: explicitly specify the db-file and format ===
<code>
[chris@спутник tmp]$ certutil -d sql:/home/chris/.pki/nssdb [...]
</code>

=== How to verify that the cert is in pem format? ===
<code>
[chris@спутник tmp]$ openssl x509 -inform pem -noout -text -in /home/chris/fluxcoil.net_201404.cert
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 12693929900255756002 (0xb029e5fd2c743ee2)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=DE, ST=Thuringia, L=Muehlhausen, O=Freespeach noorg, OU=noou, CN=fluxcoil.net/emailAddress=chorn@fluxcoil.net
        [...]
</code>

=== How to verify that you can read the cert-db? ===
<code>
[chris@спутник tmp]$ certutil -d sql:/home/chris/.pki/nssdb -L

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

fluxcoil.net                                                 P,,  
[chris@спутник tmp]$ 
</code>        

=== issue: "SEC_ERROR_BAD_DATABASE: security library: bad database." ===
<code>
[chris@спутник tmp]$ certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n "fluxcoil.net" -i /home/chris/fluxcoil.net_201404.cert
certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.
[chris@спутник tmp]$ NSS_DEFAULT_DB_TYPE=sql certutil -d ~/.pki/nssdb -K
certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.
</code>

=== Solution: resolve the full path, use no variable: ===
<code>
[chris@спутник tmp]$ certutil -d sql:/home/chris/.pki/nssdb -K
certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services"
certutil: no keys found
[chris@спутник tmp]$ certutil -d sql:/home/chris/.pki/nssdb \
  -A -t "P,," -n "fluxcoil.net" -i /home/chris/fluxcoil.net_201404.cert
[chris@спутник tmp]$ 
</code>