diff -up ./src/common/pkcs11_lib.c.pkix ./src/common/pkcs11_lib.c

--- ./src/common/pkcs11_lib.c.pkix	2016-01-11 17:50:54.125209641 -0800

+++ ./src/common/pkcs11_lib.c	2016-01-11 17:51:48.586525038 -0800

@@ -198,9 +198,11 @@ int crypto_init(cert_policy *policy) {

   }

   if (rv != SECSuccess) {

-    DBG1("NSS_Initialize faile: %s", SECU_Strerror(PR_GetError()));

+    DBG1("NSS_Initialize failed: %s", SECU_Strerror(PR_GetError()));

     return -1;

   }

+  (void )CERT_SetUsePKIXForValidation(PR_TRUE);

+

   /* register a callback */

   PK11_SetPasswordFunc(password_passthrough);