Reply To: The Certificates page on a fresh organisation, and what will appear on it

No, it refuses every certificate until its revocation set is loaded. There’s no password fallback either: a presented certificate always decides.