Todo !!!
File cacert.pem
For IE just convert to DER form :
$ openssl x509 -setalias "Tchetch CA" -outform DER -in cacert.crt -out cacert.der
For Mozilla the pem format is ok. Rename it to .crt so apache distribute it with the good MIME type.