When I was trying to create a signed JAR file that Firefox will allow to gain additional privileges, the biggest problem I faced was rooted at the fact that my certificate authority did not issue a certificate that entitled me to sign code. This simple fact was not clearly visible at the beginning, though.