Changing details to enable ca-certs download Run the following command: nano /usr/lib/cgi-bin/est.fcgi Replace my $mime = "application/pkcs7-mime; smime-type=certs-only"; with my $mime = "application/pkcs7-mime";. Start the OpenXPKI service using openxpkictl.