From what has been said here, a certificate requires the CA flag in order to import into the Certificate Manager, and without a valid loaded CA certificate for a secure site, MfE won't work.