Pete Collins, fondateur de Mozdev Group présente son tutoriel comme suit :

After a couple of days of pain, I've decided to write up a doc on how I was able to successfully sign an XPI using a test cert. For no better reason than I know I will forget by next week and honestly I wouldn't want to wish the pain I endured doing this on others. These docs are focused on Unix'y type systems. This doc is intended as an exercise to show how to sign an XPI package, you will need to obtain a valid certificate from an established certificate authority (CA) such as Verisign if you want to distribute signed XPI packages.