Import CA Certificate On Symbian Based Phones

This web page enables users with a Symbian-based smartphone (like the Nokia E50, E60, E61, E61i, E62, E65, E70, E90 and the N-Series) to import CA certificates in a very easy manner. Due to a weird implementation in the certificate interface, it's very hard to easily add a third party (self-signed) CA certificate to the certificate store (even the Windows Mobile has an easier way of doing this).

It should also work for phones based on the S40 OS.

The workaround you might find on the Internet suggests using a webserver. However not every one has a webserver available, therefor I created this small service. B.t.w., even Nokia suggests that you take this path.....

You can upload the certificate you want to import (in the binary DER format). After uploading you'll see a download URL. Just point the browser on your phone to the URL, and you'll be able to import it on your phone.

Upload Certificate

Upload your DER (Binary) encoded (CA) certificate using the following form:

NOTE: I made some changes on the webserver, and I might have overlooked something. If things aren't working as they should you might want to leave a comment here.

Suggestions, or comments can be entered here.

The 'technique' used is explained here.

Served 315 certificates in the last 7 days.

Upload rules:

• The uploaded file can't be larger than 5kB (a normal certificate is about 4kB in size)
• The filename length can't exceed 64 characters (one has to have some limitations).
• The file extension will automagically be changed to .der
• The returned filename will be changed to a random string of 8 characters (e.g. f4e2h7d8.der) to avoid naming conflicts
• Uploaded files will remain on this server for at least 7 days, so the certificate can be downloaded multiple times, but you need to remember the download URL yourself

Future enhancements:

• tutorial on how to export and/or convert different certificate formats to the DER format Added a google search result with lots of results explaining the procedure.
• possibility to receive the download location in an e-mail (e-mail addresses won't be saved) Added a mailto: link on the download page. Easy to implement and works in most cases.
• Symbian S40 device support Depending on the device type the download page will contain a different document-type. This has been done theoretically, so I haven't been able to test it yet. The window title shows if the certificate is for a S40 or S60 device.

back to the blog