Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

6 files changed, 1009 insertions, 0 deletions

diff --git a/l10n-eo/security/manager/chrome/pipnss/nsserrors.properties b/l10n-eo/security/manager/chrome/pipnss/nsserrors.properties
new file mode 100644
index 0000000000..7dad3904c3
--- /dev/null
+++ b/l10n-eo/security/manager/chrome/pipnss/nsserrors.properties
@@ -0,0 +1,331 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+SSL_ERROR_EXPORT_ONLY_SERVER=Ne eblas komunikiĝi sekure.  La paro ne kapablas uzi altgradan ĉifradon.
+SSL_ERROR_US_ONLY_SERVER=Ne eblas komunikiĝi sekure.  La paro postulas altgradan ĉifradon kiu ne estas subtenata.
+SSL_ERROR_NO_CYPHER_OVERLAP=Ne eblas komunikiĝi sekure kun la paro: neniu komuna ĉifra algoritmo.
+SSL_ERROR_NO_CERTIFICATE=Ne eblas trovi la atestilon aŭ ŝlosilon bezonatan por la aŭtentikado.
+SSL_ERROR_BAD_CERTIFICATE=Ne eblas komunikiĝi sekure kun la paro: la atestilo de la paro estis rifuzita.
+SSL_ERROR_BAD_CLIENT=La servilo renkontis malbonajn datumojn el la kliento.
+SSL_ERROR_BAD_SERVER=La kliento renkontis malbonajn datumojn el la servilo.
+SSL_ERROR_UNSUPPORTED_CERTIFICATE_TYPE=Nesubtenata tipo de atestilo.
+SSL_ERROR_UNSUPPORTED_VERSION=La paro uzas nesubtenatan version de sekureca protokolo.
+SSL_ERROR_WRONG_CERTIFICATE=Aŭtentikado de kliento malsukcesa: privata ŝlosilo en la datumbazo de ŝlosiloj ne kongruas kun la publika ŝlosilo en la datumbazo de atestiloj.
+SSL_ERROR_BAD_CERT_DOMAIN=Ne eblas komunikiĝi sekure kun la paro: la petita retregiona nomo ne kongruas kun la atestilo de la servilo.
+SSL_ERROR_POST_WARNING=Nerekonebla kodo de eraro de SSL.
+SSL_ERROR_SSL2_DISABLED=La paro nur subtenas version 2 de SSL, kiu estas loke malaktiva.
+SSL_ERROR_BAD_MAC_READ=SSL ricevis mesaĝon kun malĝusta aŭtentika kodo de mesaĝo.
+SSL_ERROR_BAD_MAC_ALERT=La paro de SSL raportas malĝustan aŭtentikan kodon de mesaĝo.
+SSL_ERROR_BAD_CERT_ALERT=La paro de SSL ne povas kontroli vian atestilon.
+SSL_ERROR_REVOKED_CERT_ALERT=La paro de SSL rifuzis vian atestilon kiel senvalidigita.
+SSL_ERROR_EXPIRED_CERT_ALERT=La paro de SSL rifuzis vian atestilon kiel senvalidiĝinta.
+SSL_ERROR_SSL_DISABLED=Ne eblas konekti: SSL ne estas aktiva.
+SSL_ERROR_FORTEZZA_PQG=Ne eblas konekti: la paro de SSL estas en alia retregiono de FORTEZZA.
+SSL_ERROR_UNKNOWN_CIPHER_SUITE=An unknown SSL cipher suite has been requested.
+SSL_ERROR_NO_CIPHERS_SUPPORTED=No cipher suites are present and enabled in this program.
+SSL_ERROR_BAD_BLOCK_PADDING=SSL received a record with bad block padding.
+SSL_ERROR_RX_RECORD_TOO_LONG=SSL received a record that exceeded the maximum permissible length.
+SSL_ERROR_TX_RECORD_TOO_LONG=SSL attempted to send a record that exceeded the maximum permissible length.
+SSL_ERROR_RX_MALFORMED_HELLO_REQUEST=SSL received a malformed Hello Request handshake message.
+SSL_ERROR_RX_MALFORMED_CLIENT_HELLO=SSL received a malformed Client Hello handshake message.
+SSL_ERROR_RX_MALFORMED_SERVER_HELLO=SSL received a malformed Server Hello handshake message.
+SSL_ERROR_RX_MALFORMED_CERTIFICATE=SSL received a malformed Certificate handshake message.
+SSL_ERROR_RX_MALFORMED_SERVER_KEY_EXCH=SSL received a malformed Server Key Exchange handshake message.
+SSL_ERROR_RX_MALFORMED_CERT_REQUEST=SSL received a malformed Certificate Request handshake message.
+SSL_ERROR_RX_MALFORMED_HELLO_DONE=SSL received a malformed Server Hello Done handshake message.
+SSL_ERROR_RX_MALFORMED_CERT_VERIFY=SSL received a malformed Certificate Verify handshake message.
+SSL_ERROR_RX_MALFORMED_CLIENT_KEY_EXCH=SSL received a malformed Client Key Exchange handshake message.
+SSL_ERROR_RX_MALFORMED_FINISHED=SSL received a malformed Finished handshake message.
+SSL_ERROR_RX_MALFORMED_CHANGE_CIPHER=SSL received a malformed Change Cipher Spec record.
+SSL_ERROR_RX_MALFORMED_ALERT=SSL received a malformed Alert record.
+SSL_ERROR_RX_MALFORMED_HANDSHAKE=SSL received a malformed Handshake record.
+SSL_ERROR_RX_MALFORMED_APPLICATION_DATA=SSL received a malformed Application Data record.
+SSL_ERROR_RX_UNEXPECTED_HELLO_REQUEST=SSL received an unexpected Hello Request handshake message.
+SSL_ERROR_RX_UNEXPECTED_CLIENT_HELLO=SSL received an unexpected Client Hello handshake message.
+SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO=SSL received an unexpected Server Hello handshake message.
+SSL_ERROR_RX_UNEXPECTED_CERTIFICATE=SSL received an unexpected Certificate handshake message.
+SSL_ERROR_RX_UNEXPECTED_SERVER_KEY_EXCH=SSL received an unexpected Server Key Exchange handshake message.
+SSL_ERROR_RX_UNEXPECTED_CERT_REQUEST=SSL received an unexpected Certificate Request handshake message.
+SSL_ERROR_RX_UNEXPECTED_HELLO_DONE=SSL received an unexpected Server Hello Done handshake message.
+SSL_ERROR_RX_UNEXPECTED_CERT_VERIFY=SSL received an unexpected Certificate Verify handshake message.
+SSL_ERROR_RX_UNEXPECTED_CLIENT_KEY_EXCH=SSL received an unexpected Client Key Exchange handshake message.
+SSL_ERROR_RX_UNEXPECTED_FINISHED=SSL received an unexpected Finished handshake message.
+SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER=SSL received an unexpected Change Cipher Spec record.
+SSL_ERROR_RX_UNEXPECTED_ALERT=SSL received an unexpected Alert record.
+SSL_ERROR_RX_UNEXPECTED_HANDSHAKE=SSL received an unexpected Handshake record.
+SSL_ERROR_RX_UNEXPECTED_APPLICATION_DATA=SSL received an unexpected Application Data record.
+SSL_ERROR_RX_UNKNOWN_RECORD_TYPE=SSL received a record with an unknown content type.
+SSL_ERROR_RX_UNKNOWN_HANDSHAKE=SSL received a handshake message with an unknown message type.
+SSL_ERROR_RX_UNKNOWN_ALERT=SSL received an alert record with an unknown alert description.
+SSL_ERROR_CLOSE_NOTIFY_ALERT=SSL peer has closed this connection.
+SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT=SSL peer was not expecting a handshake message it received.
+SSL_ERROR_DECOMPRESSION_FAILURE_ALERT=SSL peer was unable to successfully decompress an SSL record it received.
+SSL_ERROR_HANDSHAKE_FAILURE_ALERT=SSL peer was unable to negotiate an acceptable set of security parameters.
+SSL_ERROR_ILLEGAL_PARAMETER_ALERT=SSL peer rejected a handshake message for unacceptable content.
+SSL_ERROR_UNSUPPORTED_CERT_ALERT=SSL peer does not support certificates of the type it received.
+SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT=SSL peer had some unspecified issue with the certificate it received.
+SSL_ERROR_GENERATE_RANDOM_FAILURE=SSL experienced a failure of its random number generator.
+SSL_ERROR_SIGN_HASHES_FAILURE=Unable to digitally sign data required to verify your certificate.
+SSL_ERROR_EXTRACT_PUBLIC_KEY_FAILURE=SSL was unable to extract the public key from the peer's certificate.
+SSL_ERROR_SERVER_KEY_EXCHANGE_FAILURE=Unspecified failure while processing SSL Server Key Exchange handshake.
+SSL_ERROR_CLIENT_KEY_EXCHANGE_FAILURE=Unspecified failure while processing SSL Client Key Exchange handshake.
+SSL_ERROR_ENCRYPTION_FAILURE=Bulk data encryption algorithm failed in selected cipher suite.
+SSL_ERROR_DECRYPTION_FAILURE=Bulk data decryption algorithm failed in selected cipher suite.
+SSL_ERROR_SOCKET_WRITE_FAILURE=Attempt to write encrypted data to underlying socket failed.
+SSL_ERROR_MD5_DIGEST_FAILURE=MD5 digest function failed.
+SSL_ERROR_SHA_DIGEST_FAILURE=SHA-1 digest function failed.
+SSL_ERROR_MAC_COMPUTATION_FAILURE=MAC computation failed.
+SSL_ERROR_SYM_KEY_CONTEXT_FAILURE=Failure to create Symmetric Key context.
+SSL_ERROR_SYM_KEY_UNWRAP_FAILURE=Failure to unwrap the Symmetric key in Client Key Exchange message.
+SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED=SSL Server attempted to use domestic-grade public key with export cipher suite.
+SSL_ERROR_IV_PARAM_FAILURE=PKCS11 code failed to translate an IV into a param.
+SSL_ERROR_INIT_CIPHER_SUITE_FAILURE=Failed to initialize the selected cipher suite.
+SSL_ERROR_SESSION_KEY_GEN_FAILURE=Client failed to generate session keys for SSL session.
+SSL_ERROR_NO_SERVER_KEY_FOR_ALG=Server has no key for the attempted key exchange algorithm.
+SSL_ERROR_TOKEN_INSERTION_REMOVAL=PKCS#11 token was inserted or removed while operation was in progress.
+SSL_ERROR_TOKEN_SLOT_NOT_FOUND=No PKCS#11 token could be found to do a required operation.
+SSL_ERROR_NO_COMPRESSION_OVERLAP=Cannot communicate securely with peer: no common compression algorithm(s).
+SSL_ERROR_HANDSHAKE_NOT_COMPLETED=Cannot initiate another SSL handshake until current handshake is complete.
+SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE=Received incorrect handshakes hash values from peer.
+SSL_ERROR_CERT_KEA_MISMATCH=The certificate provided cannot be used with the selected key exchange algorithm.
+SSL_ERROR_NO_TRUSTED_SSL_CLIENT_CA=No certificate authority is trusted for SSL client authentication.
+SSL_ERROR_SESSION_NOT_FOUND=Client's SSL session ID not found in server's session cache.
+SSL_ERROR_DECRYPTION_FAILED_ALERT=Peer was unable to decrypt an SSL record it received.
+SSL_ERROR_RECORD_OVERFLOW_ALERT=Peer received an SSL record that was longer than is permitted.
+SSL_ERROR_UNKNOWN_CA_ALERT=Peer does not recognize and trust the CA that issued your certificate.
+SSL_ERROR_ACCESS_DENIED_ALERT=Peer received a valid certificate, but access was denied.
+SSL_ERROR_DECODE_ERROR_ALERT=Peer could not decode an SSL handshake message.
+SSL_ERROR_DECRYPT_ERROR_ALERT=Peer reports failure of signature verification or key exchange.
+SSL_ERROR_EXPORT_RESTRICTION_ALERT=Peer reports negotiation not in compliance with export regulations.
+SSL_ERROR_PROTOCOL_VERSION_ALERT=Peer reports incompatible or unsupported protocol version.
+SSL_ERROR_INSUFFICIENT_SECURITY_ALERT=Server requires ciphers more secure than those supported by client.
+SSL_ERROR_INTERNAL_ERROR_ALERT=Peer reports it experienced an internal error.
+SSL_ERROR_USER_CANCELED_ALERT=Peer user canceled handshake.
+SSL_ERROR_NO_RENEGOTIATION_ALERT=Peer does not permit renegotiation of SSL security parameters.
+SSL_ERROR_SERVER_CACHE_NOT_CONFIGURED=SSL server cache not configured and not disabled for this socket.
+SSL_ERROR_UNSUPPORTED_EXTENSION_ALERT=SSL peer does not support requested TLS hello extension.
+SSL_ERROR_CERTIFICATE_UNOBTAINABLE_ALERT=SSL peer could not obtain your certificate from the supplied URL.
+SSL_ERROR_UNRECOGNIZED_NAME_ALERT=SSL peer has no certificate for the requested DNS name.
+SSL_ERROR_BAD_CERT_STATUS_RESPONSE_ALERT=SSL peer was unable to get an OCSP response for its certificate.
+SSL_ERROR_BAD_CERT_HASH_VALUE_ALERT=SSL peer reported bad certificate hash value.
+SSL_ERROR_RX_UNEXPECTED_NEW_SESSION_TICKET=SSL received an unexpected New Session Ticket handshake message.
+SSL_ERROR_RX_MALFORMED_NEW_SESSION_TICKET=SSL received a malformed New Session Ticket handshake message.
+SSL_ERROR_DECOMPRESSION_FAILURE=SSL received a compressed record that could not be decompressed.
+SSL_ERROR_RENEGOTIATION_NOT_ALLOWED=Renegotiation is not allowed on this SSL socket.
+SSL_ERROR_UNSAFE_NEGOTIATION=Peer attempted old style (potentially vulnerable) handshake.
+SSL_ERROR_RX_UNEXPECTED_UNCOMPRESSED_RECORD=SSL received an unexpected uncompressed record.
+SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY=SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.
+SSL_ERROR_NEXT_PROTOCOL_DATA_INVALID=SSL received invalid NPN extension data.
+SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SSL2=SSL feature not supported for SSL 2.0 connections.
+SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SERVERS=SSL feature not supported for servers.
+SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_CLIENTS=SSL feature not supported for clients.
+SSL_ERROR_INVALID_VERSION_RANGE=SSL version range is not valid.
+SSL_ERROR_CIPHER_DISALLOWED_FOR_VERSION=SSL peer selected a cipher suite disallowed for the selected protocol version.
+SSL_ERROR_RX_MALFORMED_HELLO_VERIFY_REQUEST=SSL received a malformed Hello Verify Request handshake message.
+SSL_ERROR_RX_UNEXPECTED_HELLO_VERIFY_REQUEST=SSL received an unexpected Hello Verify Request handshake message.
+SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_VERSION=SSL feature not supported for the protocol version.
+SSL_ERROR_RX_UNEXPECTED_CERT_STATUS=SSL received an unexpected Certificate Status handshake message.
+SSL_ERROR_UNSUPPORTED_HASH_ALGORITHM=Unsupported hash algorithm used by TLS peer.
+SSL_ERROR_DIGEST_FAILURE=Digest function failed.
+SSL_ERROR_INCORRECT_SIGNATURE_ALGORITHM=Incorrect signature algorithm specified in a digitally-signed element.
+SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK=The next protocol negotiation extension was enabled, but the callback was cleared prior to being needed.
+SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL=The server supports no protocols that the client advertises in the ALPN extension.
+SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT=The server rejected the handshake because the client downgraded to a lower TLS version than the server supports.
+SSL_ERROR_WEAK_SERVER_CERT_KEY=The server certificate included a public key that was too weak.
+SSL_ERROR_RX_SHORT_DTLS_READ=Not enough room in buffer for DTLS record.
+SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM=No supported TLS signature algorithm was configured.
+SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM=The peer used an unsupported combination of signature and hash algorithm.
+SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET=The peer tried to resume without a correct extended_master_secret extension.
+SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET=The peer tried to resume with an unexpected extended_master_secret extension.
+SEC_ERROR_IO=An I/O error occurred during security authorization.
+SEC_ERROR_LIBRARY_FAILURE=security library failure.
+SEC_ERROR_BAD_DATA=security library: received bad data.
+SEC_ERROR_OUTPUT_LEN=security library: output length error.
+SEC_ERROR_INPUT_LEN=security library has experienced an input length error.
+SEC_ERROR_INVALID_ARGS=security library: invalid arguments.
+SEC_ERROR_INVALID_ALGORITHM=security library: invalid algorithm.
+SEC_ERROR_INVALID_AVA=security library: invalid AVA.
+SEC_ERROR_INVALID_TIME=Improperly formatted time string.
+SEC_ERROR_BAD_DER=security library: improperly formatted DER-encoded message.
+SEC_ERROR_BAD_SIGNATURE=Peer's certificate has an invalid signature.
+SEC_ERROR_EXPIRED_CERTIFICATE=Peer's Certificate has expired.
+SEC_ERROR_REVOKED_CERTIFICATE=Peer's Certificate has been revoked.
+SEC_ERROR_UNKNOWN_ISSUER=Peer's Certificate issuer is not recognized.
+SEC_ERROR_BAD_KEY=Peer's public key is invalid.
+SEC_ERROR_BAD_PASSWORD=The security password entered is incorrect.
+SEC_ERROR_RETRY_PASSWORD=New password entered incorrectly.  Please try again.
+SEC_ERROR_NO_NODELOCK=security library: no nodelock.
+SEC_ERROR_BAD_DATABASE=security library: bad database.
+SEC_ERROR_NO_MEMORY=security library: memory allocation failure.
+SEC_ERROR_UNTRUSTED_ISSUER=Peer's certificate issuer has been marked as not trusted by the user.
+SEC_ERROR_UNTRUSTED_CERT=Peer's certificate has been marked as not trusted by the user.
+SEC_ERROR_DUPLICATE_CERT=Certificate already exists in your database.
+SEC_ERROR_DUPLICATE_CERT_NAME=Downloaded certificate's name duplicates one already in your database.
+SEC_ERROR_ADDING_CERT=Error adding certificate to database.
+SEC_ERROR_FILING_KEY=Error refiling the key for this certificate.
+SEC_ERROR_NO_KEY=The private key for this certificate cannot be found in key database
+SEC_ERROR_CERT_VALID=This certificate is valid.
+SEC_ERROR_CERT_NOT_VALID=This certificate is not valid.
+SEC_ERROR_CERT_NO_RESPONSE=Cert Library: No Response
+SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE=The certificate issuer's certificate has expired.  Check your system date and time.
+SEC_ERROR_CRL_EXPIRED=The CRL for the certificate's issuer has expired.  Update it or check your system date and time.
+SEC_ERROR_CRL_BAD_SIGNATURE=The CRL for the certificate's issuer has an invalid signature.
+SEC_ERROR_CRL_INVALID=La nova CRL havas nevalidan formon.
+SEC_ERROR_EXTENSION_VALUE_INVALID=Certificate extension value is invalid.
+SEC_ERROR_EXTENSION_NOT_FOUND=Certificate extension not found.
+SEC_ERROR_CA_CERT_INVALID=Issuer certificate is invalid.
+SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID=Certificate path length constraint is invalid.
+SEC_ERROR_CERT_USAGES_INVALID=Certificate usages field is invalid.
+SEC_INTERNAL_ONLY=**Internal ONLY module**
+SEC_ERROR_INVALID_KEY=The key does not support the requested operation.
+SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION=Certificate contains unknown critical extension.
+SEC_ERROR_OLD_CRL=New CRL is not later than the current one.
+SEC_ERROR_NO_EMAIL_CERT=Not encrypted or signed: you do not yet have an email certificate.
+SEC_ERROR_NO_RECIPIENT_CERTS_QUERY=Not encrypted: you do not have certificates for each of the recipients.
+SEC_ERROR_NOT_A_RECIPIENT=Cannot decrypt: you are not a recipient, or matching certificate and private key not found.
+SEC_ERROR_PKCS7_KEYALG_MISMATCH=Cannot decrypt: key encryption algorithm does not match your certificate.
+SEC_ERROR_PKCS7_BAD_SIGNATURE=Signature verification failed: no signer found, too many signers found, or improper or corrupted data.
+SEC_ERROR_UNSUPPORTED_KEYALG=Unsupported or unknown key algorithm.
+SEC_ERROR_DECRYPTION_DISALLOWED=Cannot decrypt: encrypted using a disallowed algorithm or key size.
+XP_SEC_FORTEZZA_BAD_CARD=Fortezza card has not been properly initialized.  Please remove it and return it to your issuer.
+XP_SEC_FORTEZZA_NO_CARD=No Fortezza cards Found
+XP_SEC_FORTEZZA_NONE_SELECTED=No Fortezza card selected
+XP_SEC_FORTEZZA_MORE_INFO=Please select a personality to get more info on
+XP_SEC_FORTEZZA_PERSON_NOT_FOUND=Personality not found
+XP_SEC_FORTEZZA_NO_MORE_INFO=No more information on that Personality
+XP_SEC_FORTEZZA_BAD_PIN=Invalid Pin
+XP_SEC_FORTEZZA_PERSON_ERROR=Couldn't initialize Fortezza personalities.
+SEC_ERROR_NO_KRL=No KRL for this site's certificate has been found.
+SEC_ERROR_KRL_EXPIRED=The KRL for this site's certificate has expired.
+SEC_ERROR_KRL_BAD_SIGNATURE=The KRL for this site's certificate has an invalid signature.
+SEC_ERROR_REVOKED_KEY=The key for this site's certificate has been revoked.
+SEC_ERROR_KRL_INVALID=New KRL has an invalid format.
+SEC_ERROR_NEED_RANDOM=security library: need random data.
+SEC_ERROR_NO_MODULE=security library: no security module can perform the requested operation.
+SEC_ERROR_NO_TOKEN=The security card or token does not exist, needs to be initialized, or has been removed.
+SEC_ERROR_READ_ONLY=security library: read-only database.
+SEC_ERROR_NO_SLOT_SELECTED=No slot or token was selected.
+SEC_ERROR_CERT_NICKNAME_COLLISION=A certificate with the same nickname already exists.
+SEC_ERROR_KEY_NICKNAME_COLLISION=A key with the same nickname already exists.
+SEC_ERROR_SAFE_NOT_CREATED=error while creating safe object
+SEC_ERROR_BAGGAGE_NOT_CREATED=error while creating baggage object
+XP_JAVA_REMOVE_PRINCIPAL_ERROR=Couldn't remove the principal
+XP_JAVA_DELETE_PRIVILEGE_ERROR=Couldn't delete the privilege
+XP_JAVA_CERT_NOT_EXISTS_ERROR=This principal doesn't have a certificate
+SEC_ERROR_BAD_EXPORT_ALGORITHM=Required algorithm is not allowed.
+SEC_ERROR_EXPORTING_CERTIFICATES=Error attempting to export certificates.
+SEC_ERROR_IMPORTING_CERTIFICATES=Error attempting to import certificates.
+SEC_ERROR_PKCS12_DECODING_PFX=Unable to import.  Decoding error.  File not valid.
+SEC_ERROR_PKCS12_INVALID_MAC=Unable to import.  Invalid MAC.  Incorrect password or corrupt file.
+SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM=Unable to import.  MAC algorithm not supported.
+SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE=Unable to import.  Only password integrity and privacy modes supported.
+SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE=Unable to import.  File structure is corrupt.
+SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM=Unable to import.  Encryption algorithm not supported.
+SEC_ERROR_PKCS12_UNSUPPORTED_VERSION=Unable to import.  File version not supported.
+SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT=Unable to import.  Incorrect privacy password.
+SEC_ERROR_PKCS12_CERT_COLLISION=Unable to import.  Same nickname already exists in database.
+SEC_ERROR_USER_CANCELLED=The user pressed cancel.
+SEC_ERROR_PKCS12_DUPLICATE_DATA=Not imported, already in database.
+SEC_ERROR_MESSAGE_SEND_ABORTED=Message not sent.
+SEC_ERROR_INADEQUATE_KEY_USAGE=Certificate key usage inadequate for attempted operation.
+SEC_ERROR_INADEQUATE_CERT_TYPE=Certificate type not approved for application.
+SEC_ERROR_CERT_ADDR_MISMATCH=Address in signing certificate does not match address in message headers.
+SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY=Unable to import.  Error attempting to import private key.
+SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN=Unable to import.  Error attempting to import certificate chain.
+SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME=Unable to export.  Unable to locate certificate or key by nickname.
+SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY=Unable to export.  Private Key could not be located and exported.
+SEC_ERROR_PKCS12_UNABLE_TO_WRITE=Unable to export.  Unable to write the export file.
+SEC_ERROR_PKCS12_UNABLE_TO_READ=Unable to import.  Unable to read the import file.
+SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED=Unable to export.  Key database corrupt or deleted.
+SEC_ERROR_KEYGEN_FAIL=Unable to generate public/private key pair.
+SEC_ERROR_INVALID_PASSWORD=Password entered is invalid.  Please pick a different one.
+SEC_ERROR_RETRY_OLD_PASSWORD=Old password entered incorrectly.  Please try again.
+SEC_ERROR_BAD_NICKNAME=Certificate nickname already in use.
+SEC_ERROR_NOT_FORTEZZA_ISSUER=Peer FORTEZZA chain has a non-FORTEZZA Certificate.
+SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY=A sensitive key cannot be moved to the slot where it is needed.
+SEC_ERROR_JS_INVALID_MODULE_NAME=Nevalida nomo de modulo.
+SEC_ERROR_JS_INVALID_DLL=Invalid module path/filename
+SEC_ERROR_JS_ADD_MOD_FAILURE=Ne eblas aldoni la modulon
+SEC_ERROR_JS_DEL_MOD_FAILURE=Ne eblas forigi modulon
+SEC_ERROR_OLD_KRL=New KRL is not later than the current one.
+SEC_ERROR_CKL_CONFLICT=New CKL has different issuer than current CKL.  Delete current CKL.
+SEC_ERROR_CERT_NOT_IN_NAME_SPACE=The Certifying Authority for this certificate is not permitted to issue a certificate with this name.
+SEC_ERROR_KRL_NOT_YET_VALID=The key revocation list for this certificate is not yet valid.
+SEC_ERROR_CRL_NOT_YET_VALID=The certificate revocation list for this certificate is not yet valid.
+SEC_ERROR_UNKNOWN_CERT=The requested certificate could not be found.
+SEC_ERROR_UNKNOWN_SIGNER=The signer's certificate could not be found.
+SEC_ERROR_CERT_BAD_ACCESS_LOCATION=The location for the certificate status server has invalid format.
+SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE=The OCSP response cannot be fully decoded; it is of an unknown type.
+SEC_ERROR_OCSP_BAD_HTTP_RESPONSE=The OCSP server returned unexpected/invalid HTTP data.
+SEC_ERROR_OCSP_MALFORMED_REQUEST=The OCSP server found the request to be corrupted or improperly formed.
+SEC_ERROR_OCSP_SERVER_ERROR=The OCSP server experienced an internal error.
+SEC_ERROR_OCSP_TRY_SERVER_LATER=The OCSP server suggests trying again later.
+SEC_ERROR_OCSP_REQUEST_NEEDS_SIG=The OCSP server requires a signature on this request.
+SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST=The OCSP server has refused this request as unauthorized.
+SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS=The OCSP server returned an unrecognizable status.
+SEC_ERROR_OCSP_UNKNOWN_CERT=The OCSP server has no status for the certificate.
+SEC_ERROR_OCSP_NOT_ENABLED=You must enable OCSP before performing this operation.
+SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER=You must set the OCSP default responder before performing this operation.
+SEC_ERROR_OCSP_MALFORMED_RESPONSE=The response from the OCSP server was corrupted or improperly formed.
+SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE=The signer of the OCSP response is not authorized to give status for this certificate.
+SEC_ERROR_OCSP_FUTURE_RESPONSE=The OCSP response is not yet valid (contains a date in the future).
+SEC_ERROR_OCSP_OLD_RESPONSE=The OCSP response contains out-of-date information.
+SEC_ERROR_DIGEST_NOT_FOUND=The CMS or PKCS #7 Digest was not found in signed message.
+SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE=The CMS or PKCS #7 Message type is unsupported.
+SEC_ERROR_MODULE_STUCK=PKCS #11 module could not be removed because it is still in use.
+SEC_ERROR_BAD_TEMPLATE=Could not decode ASN.1 data. Specified template was invalid.
+SEC_ERROR_CRL_NOT_FOUND=No matching CRL was found.
+SEC_ERROR_REUSED_ISSUER_AND_SERIAL=You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.
+SEC_ERROR_BUSY=NSS could not shutdown. Objects are still in use.
+SEC_ERROR_EXTRA_INPUT=DER-encoded message contained extra unused data.
+SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE=Unsupported elliptic curve.
+SEC_ERROR_UNSUPPORTED_EC_POINT_FORM=Unsupported elliptic curve point form.
+SEC_ERROR_UNRECOGNIZED_OID=Unrecognized Object Identifier.
+SEC_ERROR_OCSP_INVALID_SIGNING_CERT=Invalid OCSP signing certificate in OCSP response.
+SEC_ERROR_REVOKED_CERTIFICATE_CRL=Certificate is revoked in issuer's certificate revocation list.
+SEC_ERROR_REVOKED_CERTIFICATE_OCSP=Issuer's OCSP responder reports certificate is revoked.
+SEC_ERROR_CRL_INVALID_VERSION=Issuer's Certificate Revocation List has an unknown version number.
+SEC_ERROR_CRL_V1_CRITICAL_EXTENSION=Issuer's V1 Certificate Revocation List has a critical extension.
+SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION=Issuer's V2 Certificate Revocation List has an unknown critical extension.
+SEC_ERROR_UNKNOWN_OBJECT_TYPE=Unknown object type specified.
+SEC_ERROR_INCOMPATIBLE_PKCS11=PKCS #11 driver violates the spec in an incompatible way.
+SEC_ERROR_NO_EVENT=No new slot event is available at this time.
+SEC_ERROR_CRL_ALREADY_EXISTS=CRL already exists.
+SEC_ERROR_NOT_INITIALIZED=NSS is not initialized.
+SEC_ERROR_TOKEN_NOT_LOGGED_IN=The operation failed because the PKCS#11 token is not logged in.
+SEC_ERROR_OCSP_RESPONDER_CERT_INVALID=Configured OCSP responder's certificate is invalid.
+SEC_ERROR_OCSP_BAD_SIGNATURE=OCSP response has an invalid signature.
+SEC_ERROR_OUT_OF_SEARCH_LIMITS=Cert validation search is out of search limits
+SEC_ERROR_INVALID_POLICY_MAPPING=Policy mapping contains anypolicy
+SEC_ERROR_POLICY_VALIDATION_FAILED=Cert chain fails policy validation
+SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE=Unknown location type in cert AIA extension
+SEC_ERROR_BAD_HTTP_RESPONSE=Servilo redonis malĝustan HTTP respondon
+SEC_ERROR_BAD_LDAP_RESPONSE=Servilo redonis malĝustan LDAP respondon
+SEC_ERROR_FAILED_TO_ENCODE_DATA=Failed to encode data with ASN1 encoder
+SEC_ERROR_BAD_INFO_ACCESS_LOCATION=Bad information access location in cert extension
+SEC_ERROR_LIBPKIX_INTERNAL=Libpkix internal error occured during cert validation.
+SEC_ERROR_PKCS11_GENERAL_ERROR=A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable error has occurred.
+SEC_ERROR_PKCS11_FUNCTION_FAILED=A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested function could not be performed.  Trying the same operation again might succeed.
+SEC_ERROR_PKCS11_DEVICE_ERROR=A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.
+SEC_ERROR_BAD_INFO_ACCESS_METHOD=Unknown information access method in certificate extension.
+SEC_ERROR_CRL_IMPORT_FAILED=Error attempting to import a CRL.
+SEC_ERROR_EXPIRED_PASSWORD=The password expired.
+SEC_ERROR_LOCKED_PASSWORD=The password is locked.
+SEC_ERROR_UNKNOWN_PKCS11_ERROR=Unknown PKCS #11 error.
+SEC_ERROR_BAD_CRL_DP_URL=Invalid or unsupported URL in CRL distribution point name.
+SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED=The certificate was signed using an signature algorithm that is disabled because it is not secure.
+MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE=The server uses key pinning (HPKP) but no trusted certificate chain could be constructed that matches the pinset. Key pinning violations cannot be overridden.
+MOZILLA_PKIX_ERROR_CA_CERT_USED_AS_END_ENTITY=The server uses a certificate with a basic constraints extension identifying it as a certificate authority. For a properly-issued certificate, this should not be the case.
+MOZILLA_PKIX_ERROR_INADEQUATE_KEY_SIZE=The server presented a certificate with a key size that is too small to establish a secure connection.
+MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA=An X.509 version 1 certificate that is not a trust anchor was used to issue the server's certificate. X.509 version 1 certificates are deprecated and should not be used to sign other certificates.
+MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE=The server presented a certificate that is not yet valid.
+MOZILLA_PKIX_ERROR_NOT_YET_VALID_ISSUER_CERTIFICATE=A certificate that is not yet valid was used to issue the server's certificate.
+MOZILLA_PKIX_ERROR_SIGNATURE_ALGORITHM_MISMATCH=The signature algorithm in the signature field of the certificate does not match the algorithm in its signatureAlgorithm field.
+MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING=The OCSP response does not include a status for the certificate being verified.
+MOZILLA_PKIX_ERROR_VALIDITY_TOO_LONG=La servilo prezentis atestilon, kiu estos valida dum tro longa tempo.
+MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING=Mankas postulata trajto de TLS.
+MOZILLA_PKIX_ERROR_INVALID_INTEGER_ENCODING=The server presented a certificate that contains an invalid encoding of an integer. Common causes include negative serial numbers, negative RSA moduli, and encodings that are longer than necessary.
+MOZILLA_PKIX_ERROR_EMPTY_ISSUER_NAME=The server presented a certificate with an empty issuer distinguished name.
+MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED=Aldona politika limigo malsuckesis dum validigo de tiu ĉi atestilo.
+MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT=La atestilo ne estas fidata ĉar ĝi estas memsubskribita.
diff --git a/l10n-eo/security/manager/chrome/pipnss/pipnss.properties b/l10n-eo/security/manager/chrome/pipnss/pipnss.properties
new file mode 100644
index 0000000000..b0594042c1
--- /dev/null
+++ b/l10n-eo/security/manager/chrome/pipnss/pipnss.properties
@@ -0,0 +1,136 @@
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+CertPasswordPrompt=Bonvolu tajpi la pasvorton por la ĵetono PKCS#11 %S.
+
+CertPasswordPromptDefault=Bonvolu tajpi vian ĉefan pasvorton.
+
+# The following strings have special requirements: they must fit in a 32 or 64
+# bytes buffer after being encoded to UTF-8.
+#
+# It's possible to verify the length of a translation using the Browser Console
+# in Firefox and evaluating the following code:
+#
+# (new TextEncoder('utf-8').encode('YOURSTRING')).length
+#
+# Simply replace YOURSTRING with your translation.
+#
+# If it's not possible to produce an understandable translation within these
+# limits, keeping the English text is an acceptable workaround.
+
+# The following strings have special requirements: they must fit in a 32 or 64
+# bytes buffer after being encoded to UTF-8.
+#
+# It's possible to verify the length of a translation using the Browser Console
+# in Firefox and evaluating the following code:
+#
+# (new TextEncoder().encode('YOURSTRING')).length
+#
+# Simply replace YOURSTRING with your translation.
+#
+# If it's not possible to produce an understandable translation within these
+# limits, keeping the English text is an acceptable workaround.
+
+# LOCALIZATION NOTE (RootCertModuleName): string limit is 64 bytes after
+# conversion to UTF-8.
+# length_limit = 64 bytes
+RootCertModuleName=Integrita modulo de radikaj atestiloj
+# LOCALIZATION NOTE (ManufacturerID): string limit is 32 bytes after conversion
+# to UTF-8.
+# length_limit = 32 bytes
+ManufacturerID=Mozilla.org
+# LOCALIZATION NOTE (LibraryDescription): string limit is 32 bytes after
+# conversion to UTF-8.
+# length_limit = 32 bytes
+LibraryDescription=Internaj ĉifraj servoj de PSM
+# LOCALIZATION NOTE (TokenDescription): string limit is 32 bytes after
+# conversion to UTF-8.
+# length_limit = 32 bytes
+TokenDescription=Ĝeneralaj ĉifraj servoj
+# LOCALIZATION NOTE (PrivateTokenDescription): string limit is 32 bytes after
+# conversion to UTF-8.
+# length_limit = 32 bytes
+PrivateTokenDescription=Programara sekuraparato
+# LOCALIZATION NOTE (SlotDescription): string limit is 64 bytes after conversion
+# to UTF-8.
+# length_limit = 64 bytes
+SlotDescription=Internaj ĉifraj servoj de PSM
+# LOCALIZATION NOTE (PrivateSlotDescription): string limit is 64 bytes after
+# conversion to UTF-8.
+# length_limit = 64 bytes
+PrivateSlotDescription=Privataj ŝlosiloj de PSM
+# LOCALIZATION NOTE (Fips140TokenDescription): string limit is 32 bytes after
+# conversion to UTF-8.
+# length_limit = 32 bytes
+Fips140TokenDescription=Programara sekuraparato (FIPS)
+# LOCALIZATION NOTE (Fips140SlotDescription): string limit is 64 bytes after
+# conversion to UTF-8.
+# length_limit = 64 bytes
+Fips140SlotDescription=FIPS 140 servoj pri ĉifrado, ŝlosiloj kaj atestiloj
+
+# LOCALIZATION NOTE (nick_template): $1s is the common name from a cert (e.g. "Mozilla"), $2s is the CA name (e.g. VeriSign)
+nick_template=%2$s ID de %1$s
+
+CertDumpKUSign=Subskribado
+CertDumpKUNonRep=Neebleco nei
+CertDumpKUEnc=Enĉifrado de ŝlosilo
+CertDumpKUDEnc=Enĉifrado de datumoj
+CertDumpKUKA=Ŝlosila interkonsento
+CertDumpKUCertSign=Atestila subskribinto
+CertDumpKUCRLSigner=CRL subskribinto
+
+PSMERR_SSL_Disabled=Ne eblas konektiĝi sekure ĉar la protokolo SSL estis malaktivigita.
+PSMERR_SSL2_Disabled=Ne eblas konektiĝi sekure ĉar la retejo uzas malnovan, nesekuran version de la protokolo SSL.
+PSMERR_HostReusedIssuerSerial=Vi ricevis nevalidan atestilon.  Bonvolu kontakti la administranton de la servilo aŭ la sendinton de la retpoŝto kaj doni al ili la jenan informon:\n\nVia atestilo enhavas la saman serian numeron de alia atestilo eldonita de la atestila aŭtoritato.  Bonvolu akiri novan atestilon kiu enhavas unikan serian numeron.
+
+# LOCALIZATION NOTE (SSLConnectionErrorPrefix2): %1$S is the host string, %2$S is more detailed information (localized as well).
+SSLConnectionErrorPrefix2=Okazis eraro dum la konekto al %1$S. %2$S\n
+
+certErrorIntro=%S uzas nevalidan sekurecan atestilon.
+
+certErrorTrust_SelfSigned=La atestilo ne estas fidata ĉar ĝi estas memsubskribita.
+certErrorTrust_UnknownIssuer=La atestilo ne estas fidata ĉar la atestilo de la eldoninto estas nekonata.
+certErrorTrust_UnknownIssuer2=Eble la servilo ne sendas la ĝustajn perajn atestilojn.
+certErrorTrust_UnknownIssuer3=Eble aldona radika atestilo bezonas esti importita.
+certErrorTrust_CaInvalid=La atestilo ne estas fidata ĉar ĝi estis eldonita de nevalida CA atestilo.
+certErrorTrust_Issuer=La atestilo ne estas fidata ĉar la atestilo de la eldoninto ne estas fidata.
+certErrorTrust_SignatureAlgorithmDisabled=La atestilo ne estas fidata ĉar ĝi estis subskribita per subskriba algortimo, kiu ne plu estas aktiva pro ĝia nesekureco.
+certErrorTrust_ExpiredIssuer=La atestilo ne estas fidata ĉar la atestilo de la eldoninto senvalidiĝis.
+certErrorTrust_Untrusted=La atestilo ne venas el fidata origino.
+certErrorTrust_MitM=Via konekto estis interkaptita de peranto TLS. Malinstalu ĝin, se tio eblas, aŭ agordu vian aparaton tiel ke ĝi fidos la radikan atestilon de la peranto.
+
+certErrorMismatch=La atestilo ne estas valida por la nomo %S.
+# LOCALIZATION NOTE (certErrorMismatchSinglePrefix): %S is replaced by the domain for which the certificate is valid
+certErrorMismatchSinglePrefix=La atestilo nur validas por %S.
+certErrorMismatchMultiple=La atestilo estas valida nur por la jenaj nomoj:
+
+# LOCALIZATION NOTE (certErrorExpiredNow): Do not translate %1$S (date+time of expired certificate) or %2$S (current date+time)
+certErrorExpiredNow=La atestilo senvalidiĝis je %1$S. Nuntempe estas la %2$S.
+
+# LOCALIZATION NOTE (certErrorNotYetValidNow): Do not translate %1$S (date+time certificate will become valid) or %2$S (current date+time)
+certErrorNotYetValidNow=La atestilo ne estos valida ĝis %1$S. Nuntempe estas la %2$S.
+
+certErrorMitM=Retejoj legitimas sin per atestiloj, kiuj estas eldonitaj de atestilaj aŭtoritatoj.
+# LOCALIZATION NOTE (certErrorMitM2): %S is brandShortName
+certErrorMitM2=%S estas apogata de la neprofitcela organizo Mozilla, kiu administras tute malfermitan magazenon de atestilaj aŭtoritatoj (CA). Tiu magazeno de CA-j helpas garantii ke la atestilaj aŭtoritatoj plenumos la sekurecajn praktikojn, por protekti la uzantojn.
+# LOCALIZATION NOTE (certErrorMitM3): %S is brandShortName
+certErrorMitM3=%S uzas la magazenon de CA de Mozilla por kontroli ĉu konektoj estas sekuraj, anstataŭ uzi la atestilojn provizitajn de la mastruma sistemo de la uzanto. Se kontraŭvirusa programo, aŭ reto, interkaptas la konekton per sekureca atestilo eldonita de CA, kiu ne estas en la magazeno de CA de Mozilla, do la konekto estos konsiderita nesekura.
+
+certErrorSymantecDistrustAdministrator=Vi povas sciigi la administraton de la retejo pri tiu ĉi problemo.
+
+# LOCALIZATION NOTE (certErrorCodePrefix3): %S is replaced by the error code.
+certErrorCodePrefix3=Erarkodo: %S
+
+P12DefaultNickname=Atestilo importita
+CertUnknown=Nekonata
+CertNoEmailAddress=(neniu retpoŝta adreso)
+CaCertExists=Tiu ĉi atestilo jam estas instalita kiel atestilo de aŭtoritato.
+NotACACert=Tiu ĉi ne estas atestilo de atestila aŭtoritato do ĝi ne povas esti importita en la lista de aŭtoritataj atestiloj.
+UserCertIgnoredNoPrivateKey=Tiu ĉi persona atestilo ne povas esti instalita ĉar vi ne posedas la kongruan privatan ŝlosilon kiu estis kreita dum la peto de la atestilo.
+UserCertImported=Via persona atestilo estis instalita. Vi devus konservi sekurkopion de tiu ĉi atestilo.
+CertOrgUnknown=(ne konata)
+CertNotStored=(ne konservita)
+CertExceptionPermanent=Konstanta
+CertExceptionTemporary=Tempa
diff --git a/l10n-eo/security/manager/chrome/pippki/pippki.properties b/l10n-eo/security/manager/chrome/pippki/pippki.properties
new file mode 100644
index 0000000000..65e0708c64
--- /dev/null
+++ b/l10n-eo/security/manager/chrome/pippki/pippki.properties
@@ -0,0 +1,75 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+# Download Cert dialog
+# LOCALIZATION NOTE(newCAMessage1):
+# %S is a string representative of the certificate being downloaded/imported.
+newCAMessage1=Ĉu vi volas fidi je "%S" por la jenaj taskoj?
+unnamedCA=Atestila aŭtoritato (sennoma)
+
+getPKCS12FilePasswordMessage=Bonvolu tajpi la pasvorton uzitan por ĉifri la sekurkopion de tiu ĉi atestilo:
+
+# Client auth
+clientAuthRemember=Memori tiun ĉi decidon
+# LOCALIZATION NOTE(clientAuthNickAndSerial): Represents a single cert when the
+# user is choosing from a list of certificates.
+# %1$S is the nickname of the cert.
+# %2$S is the serial number of the cert in AA:BB:CC hex format.
+clientAuthNickAndSerial=%1$S [%2$S]
+# LOCALIZATION NOTE(clientAuthHostnameAndPort):
+# %1$S is the hostname of the server.
+# %2$S is the port of the server.
+clientAuthHostnameAndPort=%1$S:%2$S
+# LOCALIZATION NOTE(clientAuthMessage1): %S is the Organization of the server
+# cert.
+clientAuthMessage1=Organizo: "%S"
+# LOCALIZATION NOTE(clientAuthMessage2): %S is the Organization of the issuer
+# cert of the server cert.
+clientAuthMessage2=Eldonita sub: "%S"
+# LOCALIZATION NOTE(clientAuthIssuedTo): %1$S is the Distinguished Name of the
+# currently selected client cert, such as "CN=John Doe,OU=Example" (without
+# quotes).
+clientAuthIssuedTo=Liverita al: %1$S
+# LOCALIZATION NOTE(clientAuthSerial): %1$S is the serial number of the selected
+# cert in AA:BB:CC hex format.
+clientAuthSerial=Seria numero: %1$S
+# LOCALIZATION NOTE(clientAuthValidityPeriod):
+# %1$S is the already localized notBefore date of the selected cert.
+# %2$S is the already localized notAfter date of the selected cert.
+clientAuthValidityPeriod=Valida ekde %1$S ĝis %2$S
+# LOCALIZATION NOTE(clientAuthKeyUsages): %1$S is a comma separated list of
+# already localized key usages the selected cert is valid for.
+clientAuthKeyUsages=Uzoj de la ŝlosilo: %1$S
+# LOCALIZATION NOTE(clientAuthEmailAddresses): %1$S is a comma separated list of
+# e-mail addresses the selected cert is valid for.
+clientAuthEmailAddresses=Retpoŝtaj adresoj: %1$S
+# LOCALIZATION NOTE(clientAuthIssuedBy): %1$S is the Distinguished Name of the
+# cert which issued the selected cert.
+clientAuthIssuedBy=Liverita de: %1$S
+# LOCALIZATION NOTE(clientAuthStoredOn): %1$S is the name of the PKCS #11 token
+# the selected cert is stored on.
+clientAuthStoredOn=Konservita en: %1$S
+
+# Page Info
+pageInfo_NoEncryption=Ne ĉifrita konekto
+pageInfo_Privacy_None1=La TTT-a retejo %S ne subtenas ĉifradon por la paĝo kiun vi vidas.
+pageInfo_Privacy_None2=Informo sendita pere de Interreto neĉifrite povas esti vidata de aliaj homoj dum ĝia transito. 
+pageInfo_Privacy_None4=Vi vidas paĝon kiu ne estis ĉifita antaŭ la reta transmeto.
+# LOCALIZATION NOTE (pageInfo_EncryptionWithBitsAndProtocol and pageInfo_BrokenEncryption):
+# %1$S is the name of the encryption standard,
+# %2$S is the key size of the cipher.
+# %3$S is protocol version like "SSL 3" or "TLS 1.2"
+pageInfo_EncryptionWithBitsAndProtocol=Ĉifrita konekto (%1$S, ŝlosiloj de %2$S bitoj, %3$S)
+pageInfo_BrokenEncryption=Rompita ĉifrado (%1$S, ŝlosiloj de %2$S bitoj, %3$S)
+pageInfo_Privacy_Encrypted1=La paĝo, kiun vi vidas, estis ĉifrita antaŭ ol esti rete sendita.
+pageInfo_Privacy_Encrypted2=Ĉifrado igas malfacila la rigardon de informoj kiuj vojaĝas inter komputiloj. Pro tio, ne estas probable ke iu estu leginta tiun ĉi paĝon dum ĝi vojaĝis tra la reto.
+pageInfo_MixedContent=Parte ĉifrita konekto
+pageInfo_MixedContent2=Partoj de la paĝo, kiun vi vidas, ne estis ĉifritaj antaŭ ol esti senditaj al la reto.
+pageInfo_WeakCipher=La konekto al tiu ĉi retejo uzas malfortan ĉifradon kaj ne estas privata. Aliaj povus vidi vian informon aŭ modifi la konduton de la retejo.
+pageInfo_CertificateTransparency_Compliant=La retejo konformas al la politiko de travideblo de atestiloj.
+
+# Token Manager
+password_not_set=(ne difinita) 
+enable_fips=Ebligi FIPS
+
diff --git a/l10n-eo/security/manager/security/certificates/certManager.ftl b/l10n-eo/security/manager/security/certificates/certManager.ftl
new file mode 100644
index 0000000000..d189239568
--- /dev/null
+++ b/l10n-eo/security/manager/security/certificates/certManager.ftl
@@ -0,0 +1,228 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+certmgr-title =
+    .title = Administrilo de atestiloj
+
+certmgr-tab-mine =
+    .label = Viaj atestiloj
+
+certmgr-tab-remembered =
+    .label = Decidoj pri aŭtentikigo
+
+certmgr-tab-people =
+    .label = Personoj
+
+certmgr-tab-servers =
+    .label = Serviloj
+
+certmgr-tab-ca =
+    .label = Aŭtoritatoj
+
+certmgr-mine = Vi havas atestilojn de tiuj ĉi organizoj, kiuj identigas vin
+certmgr-remembered = Tiuj ĉi atestiloj estas tuzataj por identigi vin antaŭ retejoj
+certmgr-people = Vi havas konservitajn atestilojn, kiuj identigas tiujn ĉi personojn
+certmgr-server = Tiuj registroj identigas esceptojn por atestilaj eraroj
+certmgr-ca = Vi havas konservitajn atestilojn, kiuj identigas tiujn ĉi atestilaj aŭtoritatoj
+
+certmgr-edit-ca-cert2 =
+    .title = Modifi agordojn de CA atestila fido
+    .style = min-width: 48em;
+
+certmgr-edit-cert-edit-trust = Modifi fidajn agordojn:
+
+certmgr-edit-cert-trust-ssl =
+    .label = Tiu ĉi atestilo povas identigi retejojn.
+
+certmgr-edit-cert-trust-email =
+    .label = Tiu ĉi atestilo povas identigi retpoŝtajn uzantojn.
+
+certmgr-delete-cert2 =
+    .title = Forigi atestilon
+    .style = min-width: 48em; min-height: 24em;
+
+certmgr-cert-host =
+    .label = Servilo
+
+certmgr-cert-name =
+    .label = Nomo de atestilo
+
+certmgr-cert-server =
+    .label = Servilo
+
+certmgr-token-name =
+    .label = Sekureca aparato
+
+certmgr-begins-label =
+    .label = Komenciĝas je
+
+certmgr-expires-label =
+    .label = Senvalidiĝos je
+
+certmgr-email =
+    .label = Retpoŝta adreso
+
+certmgr-serial =
+    .label = Seria numero
+
+certmgr-fingerprint-sha-256 =
+    .label = SHA-256 fingrospuro
+
+certmgr-view =
+    .label = Vidi…
+    .accesskey = V
+
+certmgr-edit =
+    .label = Edit Trust…
+    .accesskey = E
+
+certmgr-export =
+    .label = Eksporti…
+    .accesskey = e
+
+certmgr-delete =
+    .label = Forviŝi…
+    .accesskey = F
+
+certmgr-delete-builtin =
+    .label = Delete or Distrust…
+    .accesskey = D
+
+certmgr-backup =
+    .label = Sekurkopii…
+    .accesskey = S
+
+certmgr-backup-all =
+    .label = Sekurkopii ĉion…
+    .accesskey = k
+
+certmgr-restore =
+    .label = Importi…
+    .accesskey = i
+
+certmgr-add-exception =
+    .label = Aldoni escepton…
+    .accesskey = a
+
+exception-mgr =
+    .title = Aldoni sekurecan escepton
+
+exception-mgr-extra-button =
+    .label = Konfirmi sekurecan escepton
+    .accesskey = K
+
+exception-mgr-supplemental-warning = Legitimaj bankoj, vendejoj kaj aliaj publikaj retejoj ne petos al vi fari ĉi tion.
+
+exception-mgr-cert-location-url =
+    .value = Retadreso:
+
+exception-mgr-cert-location-download =
+    .label = Ricevi atestilon
+    .accesskey = R
+
+exception-mgr-cert-status-view-cert =
+    .label = Vidi…
+    .accesskey = V
+
+exception-mgr-permanent =
+    .label = Konstante konservi ĉi tiun escepton
+    .accesskey = K
+
+pk11-bad-password = La tajpita pasvorto ne estas ĝusta.
+pkcs12-decode-err = Malsukcesa malkodado de dosiero. Aŭ ĝi ne estas en la formato PKCS #12, aŭ ĝi estis difektita aŭ la pasvorto kiun vi tajpis estis malĝusta.
+pkcs12-unknown-err-restore = Malsukcesa remeto de la dosiero de formato PKCS #12 kaŭzita de nekonataj kialoj.
+pkcs12-unknown-err-backup = Malsukcesa kreado de la sekurkopio en formato PKCS #12 kaŭzita de nekonataj kialoj.
+pkcs12-unknown-err = Pro nekontaj kialoj la ago PKCS #12 ne estis sukcesa.
+pkcs12-info-no-smartcard-backup = Ne eblas sekurkopii atestilojn de sekurecaj aparatoj kiel inteligenta karto.
+pkcs12-dup-data = La atestilo kaj privata ŝlosilo jam ekzistas en la sekureca aparato.
+
+## PKCS#12 file dialogs
+
+choose-p12-backup-file-dialog = Nomo de dosiero sekurkopiota
+file-browse-pkcs12-spec = Dosieroj PKCS12
+choose-p12-restore-file-dialog = Certificate File to Import
+
+## Import certificate(s) file dialog
+
+file-browse-certificate-spec = Dosieroj de atestiloj
+import-ca-certs-prompt = Elektu dosieron kiu enhavas importota(j)n atestilo(j)n de CA
+import-email-cert-prompt = Elektu dosieron kiu havas importotan retpoŝtan atestilon de iu
+
+## For editing certificates trust
+
+# Variables:
+#   $certName: the name of certificate
+edit-trust-ca = Tiu ĉi atestilo "{ $certName }" reprezentas atestilan aŭtoritaton.
+
+## For Deleting Certificates
+
+delete-user-cert-title =
+    .title = Forviŝi viajn atestilojn
+delete-user-cert-confirm = Ĉu vi certe volas forviŝi ĉi tiujn atestilojn?
+delete-user-cert-impact = Se vi forviŝis unu el viaj propraj atestiloj, vi ne plu povas uzi ĝin por identigi vin mem.
+
+
+delete-ssl-override-title =
+    .title = Forigi esceptojn por atestilaj serviloj
+delete-ssl-override-confirm = Ĉu vi certas ke vi volas forigi tiun ĉi servilan escepton?
+delete-ssl-override-impact = Se vi forigas servilan escepton, vi remetas la normalajn sekurecajn kontrolojn por tiu servilo kaj postulas ke ĝi uzu validan atestilon.
+
+delete-ca-cert-title =
+    .title = Delete or Distrust CA Certificates
+delete-ca-cert-confirm = Vi petis forigon de la atestiloj de tiuj atestilaj aŭtoritatoj (CA). Por la integritaj atestiloj tio egalas al forigo de fido. Ĉu vi volas forigi tiujn atestilojn aŭ ĉu malfidi ilin?
+delete-ca-cert-impact = Se vi forigas aŭ ne plu fidas atestilon de atestila aŭtoritato (CA), tiu ĉi programo ne plu fidos je iu ajn el la atestiloj eldonitaj de tiu CA.
+
+
+delete-email-cert-title =
+    .title = Forviŝi retpoŝtajn atestilojn
+delete-email-cert-confirm = Ĉu vi certe volas forviŝi ĉi tiujn personajn retpoŝtajn atestilojn?
+delete-email-cert-impact = Se vi forviŝas personan retpoŝtan atestilon vi ne plu povos sendi ĉifritajn mesaĝojn al tiu persono.
+
+# Used for semi-uniquely representing a cert.
+#
+# Variables:
+#   $serialNumber : the serial number of the cert in AA:BB:CC hex format.
+cert-with-serial =
+    .value = Atestilo kun seria numero: { $serialNumber }
+
+# Used to indicate that the user chose not to send a client authentication certificate to a server that requested one in a TLS handshake.
+send-no-client-certificate = Ne sendi klientan atestilon
+
+# Used when no cert is stored for an override
+no-cert-stored-for-override = (Ne konservita)
+
+# When a certificate is unavailable (for example, it has been deleted or the token it exists on has been removed).
+certificate-not-available = (Nehavebla)
+
+## Used to show whether an override is temporary or permanent
+
+permanent-override = Konstanta
+temporary-override = Provizora
+
+## Add Security Exception dialog
+
+add-exception-branded-warning = Vi pretas redifini kiel { -brand-short-name } identigas tiun ĉi retejon.
+add-exception-invalid-header = Tiu ĉi retejo klopodas identigi sin per nevalida informo.
+add-exception-domain-mismatch-short = Malĝusta retejo
+add-exception-domain-mismatch-long = La atestilo apartenas al alia retejo, kio povus indiki klopodon ŝajnigi esti tiu ĉi retejo.
+add-exception-expired-short = Neĝisdatigita informo
+add-exception-expired-long = La atestilo ne estas nuntempe valida. Ĝi estis eble ŝtelita aŭ perdita, kaj povus esti uzita de iu por klopodi ŝajnigi tiun ĉi retejon.
+add-exception-unverified-or-bad-signature-short = Nekonata idento
+add-exception-unverified-or-bad-signature-long = La atestilo ne estas fidata ĉar ĝi ne estas konfirmite eldonita de fidata aŭtoritato, per sekura subskribo.
+add-exception-valid-short = Valida atestilo
+add-exception-valid-long = Tiu ĉi retejo provizas validan, kontrolitan identecon. Vi ne bezonas aldoni escepton.
+add-exception-checking-short = Kontrolado de informo
+add-exception-checking-long = Klopodo identigi tiun ĉi retejon…
+add-exception-no-cert-short = Neniu informo disponebla
+add-exception-no-cert-long = Ne eblis akrigi identigan staton por tiu ĉi retejo.
+
+## Certificate export "Save as" and error dialogs
+
+save-cert-as = Konservi atestilon en dosiero
+cert-format-base64 = Atestilo X.509 (PEM)
+cert-format-base64-chain = Atestilo X.509 kun ĉeno (PEM)
+cert-format-der = Atestilo X.509 (DER)
+cert-format-pkcs7 = Atestilo X.509 (PKCS#7)
+cert-format-pkcs7-chain = Atestilo X.509 kun ĉeno (PKCS#7)
+write-file-failure = Eraro en dosiero
diff --git a/l10n-eo/security/manager/security/certificates/deviceManager.ftl b/l10n-eo/security/manager/security/certificates/deviceManager.ftl
new file mode 100644
index 0000000000..1e701a7373
--- /dev/null
+++ b/l10n-eo/security/manager/security/certificates/deviceManager.ftl
@@ -0,0 +1,133 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+
+## Strings used for device manager
+
+devmgr-window =
+    .title = Administrilo de aparatoj
+    .style = min-width: 67em; min-height: 32em;
+
+devmgr-devlist =
+    .label = Sekurecaj programonoj kaj aparatoj
+
+devmgr-header-details =
+    .label = Detaloj
+
+devmgr-header-value =
+    .label = Valoro
+
+devmgr-button-login =
+    .label = Akreditado
+    .accesskey = a
+
+devmgr-button-logout =
+    .label = Fini seancon
+    .accesskey = S
+
+devmgr-button-changepw =
+    .label = Ŝanĝi pasvorton
+    .accesskey = P
+
+devmgr-button-load =
+    .label = Ŝargi
+    .accesskey = Ŝ
+
+devmgr-button-unload =
+    .label = Malŝargi
+    .accesskey = M
+
+devmgr-button-enable-fips =
+    .label = Ebligi FIPS
+    .accesskey = M
+
+devmgr-button-disable-fips =
+    .label = Malaktivigi FIPS-on
+    .accesskey = M
+
+## Strings used for load device
+
+load-device =
+    .title = Ŝargi aparatan pelilon de PKCS#11
+
+load-device-info = Tajpu la informon pri la modulo kiun vi volas aldoni.
+
+load-device-modname =
+    .value = Nomo de modulo
+    .accesskey = M
+
+load-device-modname-default =
+    .value = Nova PKCS#11 modulo
+
+load-device-filename =
+    .value = Dosiero de modulo
+    .accesskey = d
+
+load-device-browse =
+    .label = Esplori…
+    .accesskey = E
+
+## Token Manager
+
+devinfo-status =
+    .label = Stato
+
+devinfo-status-disabled =
+    .label = Malaktiva
+
+devinfo-status-not-present =
+    .label = Mankanta
+
+devinfo-status-uninitialized =
+    .label = Sen valoro
+
+devinfo-status-not-logged-in =
+    .label = Ne akreditiĝinta
+
+devinfo-status-logged-in =
+    .label = Akreditiĝinta
+
+devinfo-status-ready =
+    .label = Preta
+
+devinfo-desc =
+    .label = Priskribo
+
+devinfo-man-id =
+    .label = Fabrikanto
+
+devinfo-hwversion =
+    .label = Aparata versio
+devinfo-fwversion =
+    .label = Firmprograma versio
+
+devinfo-modname =
+    .label = Modulo
+
+devinfo-modpath =
+    .label = Vojo
+
+login-failed = Malsukcesa akreditado.
+
+devinfo-label =
+    .label = Etikedo
+
+devinfo-serialnum =
+    .label = Seria numero
+
+fips-nonempty-primary-password-required = La reĝimo FIPS postulas ke vi havu ĉefan pasvorton por ĉiu sekureca aparato. Bonvolu difini la pasvorton antaŭ ol klopodi aktivigi la reĝimon FIPS.
+unable-to-toggle-fips = Unable to change the FIPS mode for the security device. It is recommended that you exit and restart this application.
+load-pk11-module-file-picker-title = Elekti ŝargotan PKCS#11 aparatan pelilon
+
+# Load Module Dialog
+load-module-help-empty-module-name =
+    .value = La nomo de modulo ne povas esti malplena.
+
+# Do not translate 'Root Certs'
+load-module-help-root-certs-module-name =
+    .value = La nomo ‘Root Certs‘ estas rezervita kaj ne povas esti uzita kiel nomo de modulo.
+
+add-module-failure = Ne eblas aldoni la modulon
+del-module-warning = Ĉu vi certe volas forigi tiun ĉi sekurecan modulon?
+del-module-error = Ne eblas forigi modulon
diff --git a/l10n-eo/security/manager/security/pippki/pippki.ftl b/l10n-eo/security/manager/security/pippki/pippki.ftl
new file mode 100644
index 0000000000..1f28878f5b
--- /dev/null
+++ b/l10n-eo/security/manager/security/pippki/pippki.ftl
@@ -0,0 +1,106 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+password-quality-meter = Mezurilo de pasvorta kvalito
+
+## Change Password dialog
+
+change-device-password-window =
+    .title = Ŝanĝi pasvorton
+# Variables:
+# $tokenName (String) - Security device of the change password dialog
+change-password-token = Sekureca aparato: { $tokenName }
+change-password-old = Nuna pasvorto:
+change-password-new = Nova pasvorto:
+change-password-reenter = Nova pasvorto (denove):
+pippki-failed-pw-change = Ne eblas ŝanĝi la ĉefan pasvorton.
+pippki-incorrect-pw = Vi ne tajpis la ĝustan (nunan) ĉefan pasvorton. Bonvolu klopodi denove.
+pippki-pw-change-ok = Ĉefa pasvorto sukcese ŝanĝita.
+pippki-pw-empty-warning = Viaj konservitaj pasvortoj kaj privataj ŝlosiloj ne estos protektitaj.
+pippki-pw-erased-ok = Vi forigis vian pasvorton. { pippki-pw-empty-warning }
+pippki-pw-not-wanted = Averto! Vi decidis ne uzi ĉefan pasvorton. { pippki-pw-empty-warning }
+pippki-pw-change2empty-in-fips-mode = Vi estas nun en FIPSa reĝimo. FIPS postulas nemalplenan  ĉefan pasvorton.
+
+## Reset Primary Password dialog
+
+reset-primary-password-window2 =
+    .title = Remeti ĉefan pasvorton
+    .style = min-width: 40em
+reset-password-button-label =
+    .label = Rekomenci
+reset-primary-password-text = Se vi nuligas vian ĉefan pasvorton ĉiuj viaj konservitaj TTTaj kaj retpoŝtaj pasvortoj estos forgesitaj, kune kun via formulara informo, personaj atestiloj kaj privataj ŝlosiloj. Ĉu vi certe volas nuligi vian ĉefan pasvorton?
+pippki-reset-password-confirmation-title = Remeti ĉefan pasvorton
+pippki-reset-password-confirmation-message = Via ĉefa pasvorto estis forigita.
+
+## Downloading cert dialog
+
+download-cert-window2 =
+    .title = Elŝutanta atestilon
+    .style = min-width: 46em
+download-cert-message = Fido je nova atestila aŭtoritato (CA) estis petita al vi.
+download-cert-trust-ssl =
+    .label = Fidi tiun ĉi atestilan aŭtoritaton por identigi retejojn.
+download-cert-trust-email =
+    .label = Fidi tiun ĉi CAn por identigi retpoŝtajn uzantojn.
+download-cert-message-desc = Antaŭ ol fidi tiun ĉi CA por ĉiuj celoj vi devus ekzameni ĝian atestilon kaj ĝiajn politikojn kaj procedurojn (se tio disponeblas).
+download-cert-view-cert =
+    .label = Vidi
+download-cert-view-text = Ekzameni atestilon de CA
+
+## Client Authorization Ask dialog
+
+
+## Client Authentication Ask dialog
+
+client-auth-window =
+    .title = Peto por identigo de uzanto
+client-auth-site-description = Tiu ĉi retejo petis ke vi identigu vin per atestilo:
+client-auth-choose-cert = Elekti atestilon por prezenti kiel identigilo:
+client-auth-send-no-certificate =
+    .label = Ne sendi atestilon
+# Variables:
+# $hostname (String) - The domain name of the site requesting the client authentication certificate
+client-auth-site-identification = “{ $hostname }” petis ke vi identigu vin per atestilo:
+client-auth-cert-details = Detaloj de la elektita atestilo:
+# Variables:
+# $issuedTo (String) - The subject common name of the currently-selected client authentication certificate
+client-auth-cert-details-issued-to = Liverita al: { $issuedTo }
+# Variables:
+# $serialNumber (String) - The serial number of the certificate (hexadecimal of the form "AA:BB:...")
+client-auth-cert-details-serial-number = Seria numero: { $serialNumber }
+# Variables:
+# $notBefore (String) - The date before which the certificate is not valid (e.g. Apr 21, 2023, 1:47:53 PM UTC)
+# $notAfter (String) - The date after which the certificate is not valid
+client-auth-cert-details-validity-period = Valida ekde { $notBefore } ĝis { $notAfter }
+# Variables:
+# $keyUsages (String) - A list of already-localized key usages for which the certificate may be used
+client-auth-cert-details-key-usages = Uzoj de la ŝlosilo: { $keyUsages }
+# Variables:
+# $emailAddresses (String) - A list of email addresses present in the certificate
+client-auth-cert-details-email-addresses = Retpoŝtaj adresoj: { $emailAddresses }
+# Variables:
+# $issuedBy (String) - The issuer common name of the certificate
+client-auth-cert-details-issued-by = Liverita de: { $issuedBy }
+# Variables:
+# $storedOn (String) - The name of the token holding the certificate (for example, "OS Client Cert Token (Modern)")
+client-auth-cert-details-stored-on = Konservita en: { $storedOn }
+client-auth-cert-remember-box =
+    .label = Memori tiun ĉi decidon
+
+## Set password (p12) dialog
+
+set-password-window =
+    .title = Elekti pasvorton por sekurkopio de atestilo
+set-password-message = La sekurkopio de la atestila pasvorto kiun vi difinos ĉi tie protektos la rezervan kopion de la dosiero kiun vi pretas krei. Vi devas difini ĉi tiun pasvorton por daŭrigi la sekurkopion.
+set-password-backup-pw =
+    .value = Pasvorto por atestila sekurkopio:
+set-password-repeat-backup-pw =
+    .value = Pasvorto por atestila sekurkopio (denove):
+set-password-reminder = Grava rimarko: Se vi forgesas la pasvorton  de via atestila sekurkopio vi ne povos uzi la sekurkopion poste. Bonvolu registri la pasvorton en sekuran lokon.
+
+## Protected authentication alert
+
+# Variables:
+# $tokenName (String) - The name of the token to authenticate to (for example, "OS Client Cert Token (Modern)")
+protected-auth-alert = Bonvolu aŭtentigi vin en la ĵetono “{ $tokenName }”. La maniero tion fari dependas de la ĵetono (ekzemple, per fingrospura legilo aŭ per kodo tajpita en cifera klavaro).