Migrating Private Keys and Certs from Netscape 3.5

[Carman, George]

Hello,

We have several Netscape 3.5 servers and we are trying to migrate their keys
and certs to newer products.  
Is there a utility which can read the database for these older products?
The files have names alias-cert.db and alias-key.db.  There is no secmod.db.

Do the nss pk12util and certutil utilities understand these older databases?
If so, example usage for export of the keys and certs would be appreciated.

Thanks,
George