This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How to delete certificate authority from installation folder instead?

more options

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10?

Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers)

Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient.

upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

Is there a way to delete a certificate authority from Firefox's installation folder or user profiles on Windows 7/10? Got this error code: SEC_ERROR_BAD_SIGNATURE (problem from Mozilla and antivirus providers) Currently the only solution been mentioned is to go to open Firefox -> Options -> Certificate Manager -> Authority to manually select and delete the certificate -> restart computer. If 3 out of 5 domain users' Firefox have this same issue, had to individually log into these 3 users to do the same steps three times, very inconvenient. upgrading/reinstalling Firefox doesn't resolve this issue. current Firefox version in use: 65.0.2 (64-bit)

All Replies (5)

more options

What certificate(s) is this about and who is the issuer?

It shouldn't be necessary to remove/disable builtin certificates. Firefox stores intermediate certificates send by the server in cert9.db in the profile folder.

If this is a problem with security software then you should fix it there.

more options

It's possible that security software added an authority certificate in the past that has expired or is creating other issues. As an alternative to removing an individual certificate, you could blow away the cert9.db file and let Firefox start with just the default certificates. Whether that is more convenient is difficult to say.

But to address your question, I don't think a cert9.db file can be edited (deleting a certificate) from outside Firefox without using a dedicated tool, because it is a SQLite database file. You could take a look at the following, but if you are pretty much done with this project, it may not be worth the effort:

https://developer.mozilla.org/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil

more options
more options

Would setting up the "Firefox for Enterprise" to centrally manage all users' Firefox help resolving this issue?

more options

You could check the Enterprise help pages to see whether they mention how you would remove certificates.

https://support.mozilla.org/products/firefox-enterprise