Penango (
Penango) makes a FF and IE browser plugin that will do PKI signing and encrypting. It lacks CRL and OCSP lookup but is in their roadmap. Or you could use the ZCO and Outlook alternatively.
Actually, contact info at
Penango, Inc - Sacramento, California (CA) | Company Profile. Penango's website sucks.