I have one certificate residing on an external crypto token (hardware). I can get info on the cert with X509Certificate methods, can use for SSL client authentication, etc, but when I check if it's an instance of a TokenCertificate, JSS says it isn't...If I cast my X509Certificate to a TokenCertificate, JSS throws "java.lang.ClassCastException: org.mozilla.jss.pkcs11.PK11InternalCert"...
-- POC
