Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Delete builtin certificate

  • 1 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 cor-el

John Just
John Just
more options

Hello.

I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token".

I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings.

I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox.

How can I delete unwanted, expired, builtin certificate?

Thanks.


Firefox 52.9 ESR. OS: Windows XP SP3.

Hello. I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token". I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings. I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox. How can I delete unwanted, expired, builtin certificate? Thanks. Firefox 52.9 ESR. OS: Windows XP SP3.

所有回复 (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can't remove builtin certificate, you can only remove all the trust bits via Edit if you really want to disable this certificate. If the certificate is expired then Firefox won't use it anyway. Builtin certificates are stored in a file in the Firefox program folder and cert9.db in the profile folder stores the data if you would distrust the certificate.