The updated NSS crypto-policy enables all tokens which broke requesting certificates due to the way that tokens were managed.
Rob Crittenden