For a friend I installed two cctv systems that seem to be DVR4H3's from AVTech and of course I ran into the same certificate issues.
I work with Linux on my machines, so I wanted to use Firefox to display the webinterface remotely. Having a java-spin called IcedTea (1.6.x) did not work, so I installed Sun's Java version 7 and presto: The applets load. I did have to turn off all security measures and disallow the checking of old certificates as well, in order for the applets to run. This is not only not ideal, but it poses direct security threats, as it invites people to invoke dangerous behaviour with their browser settings. It requires them to accept circumstances in which they no longer can expect themselves to be protected from all sorts of digital harm.
I live and work in Europe where, according to Wiki, there are some rules regarding those certificates. I wonder if that's applicable to these dvr certificates as well.
http://en.wikipedia.org/wiki/Public_key_certificate#Usage_in_the_European_Union