title: certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format
body: <p>I had downloaded a verified (not self-signed) S/MIME certificate with iceweasel (firefox) which was stored in cert8.db</p>
  
  <p>Then I used:</p>
  
  <pre><code>certutil -L -d &lt;path_to_folder_that_cert8.db_resides&gt;
  </code></pre>
  
  <p>in order to list the certificates, and then I extracted the .p12 file using the name of my certificate that certutil gave me:</p>
  
  <pre><code>pk12util -o mycertfile.p12 -n "&lt;name_found_from_certutil&gt;" -d &lt;path_to_folder_that_cert8.db_resides&gt;
  </code></pre>
  
  <p>The problem is that <strong>I lost the access</strong> to the PC that the p12 was stored and now I have only <strong>a cert8.db copy</strong> to another PC. Thus I repeated the <code>certutil &amp;&amp; pk12util</code> commands, but certutil fails with:</p>
  
  <pre><code>certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.
  </code></pre>
  
  <p>I have desperately tried at 3 different computers, including one with identical kernel and <code>libnss3-tools</code> version, (like the initial desktop where I extracted the p12 successfully) which is:</p>
  
  <pre><code>$ uname -a 
  Linux commander 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64 GNU/Linux 
  </code></pre>
  
  <p><code>libnss3-tools</code> version: 2:3.17.2-1</p>
  
  <p>Any thoughts?</p>
  
  <p>Thanks</p>