Create a new Firefox browser profile

Fetch /root/.dogtag/pki-tomcat/ca_admin_cert.p12 from the CA and place a world readable copy of this under /tmp

Launch a new Firefox browser profile

Open https://pki.example.com:8443/ca/services

Open https://pki.example.com:8443/ca/ee/ca

Select the Retrieval Tab

Select Import CA Certificate Chain

Select Import the CA certificate chain into your browser radio button and press Submit

Mark all three trust check boxes in the pop-up dialog

Select the Enrollment / Renewal Tab

Select the Browser Menu

Select the Preferences Icon

Select Advanced | Certificates | View Certificates | Your Certificates | Import…​

Load /tmp/ca_admin_cert.p12, and authenticate it to load it into the browser

Remove /tmp/ca_admin_cert.p12