You can install the secclab component and sign in javascript(I tried this but it doesn't work with the certificates we use...)
Another way is to use jss in an applet. To access the certificate DB you can use an XPComponent, but to have the rights to do this you must sign the javascript with signtool 1.3. Read the previous post there is information about this matter. Rodrigue Butaye
