1. Create a self-signed certificate on your name (as Subject Common Name put e.g. your URZ account name)

2. Convert the just created certificate into the pkcs12/pfx format.

3. Import the pkcs12 file into the certificate store of your browser (area: personal certificates)

4. Using openssl1 start a web server and request a client certificate

openssl s_server -accept 12345 -cert server.crt -key server.key -www -Verify 0

5. Open the page https://localhost:12345 and select the imported certificate to authenticate. How trustworthy is the information in Subject Common Name attribute for the server?