Bug 166893: copy the DER cert when importing the certificate

security/nss/lib/pk11wrap/pk11cert.c

@@ -1968,7 +1968,7 @@ PK11_ImportDERCertForKey(SECItem *derCert, char *nickname,void *wincx) {
     PK11SlotInfo *slot = NULL;
 
     cert = CERT_NewTempCertificate(CERT_GetDefaultCertDB(),
-                                   derCert, NULL, PR_FALSE, PR_FALSE);
+                                   derCert, NULL, PR_FALSE, PR_TRUE);
     if (cert == NULL) return NULL;
 
     slot = PK11_ImportCertForKey(cert, nickname, wincx);