ey archival, replace "null" with the transport 
	// certificate without "BEBIN..." "END..", nor line breaks.
	// change keyGenAlg to "rsa-ex"
	var keyTransportCert = null;
	//var keyGenAlg = "rsa-ex";
	var keyGenAlg = "rsa-dual-use";
        // generate keys for nsm.
        if (navigator.appName == "Netscape" && (navMajorVersion() > 3) && 
			 typeof(crypto.version) != "undefined") {
			//certNickname.value = uid.value;
        	crmfObject = crypto.generateCRMFRequest(
				"CN=undefined", 
               	