Suggestions on easy distribution/installation of self signed certificates & roots to mobile devices
I am a developer at a government agency in a developing country that has a web application with a number of web-forms for data entry through which customers can submit "electronic forms" to the agency.
For legal purposes, the forms have to be digitally signed when submitted to be considered valid. This is accomplished at the moment via a client side Digital Certificate installed in the customers PC's browser. If forms are not digitally signed then alternatively customers have to submit the forms manually with a physical signature.
Funds are short so they have a open source Certificate Authority through which they generate self signed certificates and email them to customers for installation in the customers browsers on PC's.
The distribution and installation of certificates on PC's right now however is a real hassle at times, involving many emails and phone calls as the customers are not very technically adept beyond typical word processing and excel usage - which is perfectly understandable but presents a support challenge. Then from what I have read, getting client side digital certificates installed in mobile devices is even harder...involving the installation in a keystore.
Are there any suggestions on an easy and low hassle way for the digital certificates to be installed to end customers with mobile devices. I am looking for technical suggestions to reduce the effort for end customers (e.g. just click on a link)...which I know may increase the necessary infrastructure or programming effort on the issuing end to accomplish all of that seamlessly.
I am also aware that different devices/operating systems may need custom methods (i.e. one method for android, and another for ios).
Any suggestions would be most welcome.