Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Delete builtin certificate

  • 1 回覆
  • 1 有這個問題
  • 1 次檢視
  • 最近回覆由 cor-el

John Just
John Just
more options

Hello.

I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token".

I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings.

I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox.

How can I delete unwanted, expired, builtin certificate?

Thanks.


Firefox 52.9 ESR. OS: Windows XP SP3.

Hello. I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token". I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings. I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox. How can I delete unwanted, expired, builtin certificate? Thanks. Firefox 52.9 ESR. OS: Windows XP SP3.

所有回覆 (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can't remove builtin certificate, you can only remove all the trust bits via Edit if you really want to disable this certificate. If the certificate is expired then Firefox won't use it anyway. Builtin certificates are stored in a file in the Firefox program folder and cert9.db in the profile folder stores the data if you would distrust the certificate.