This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Delete builtin certificate

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by cor-el

John Just
John Just
more options

Hello.

I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token".

I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings.

I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox.

How can I delete unwanted, expired, builtin certificate?

Thanks.


Firefox 52.9 ESR. OS: Windows XP SP3.

Hello. I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token". I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings. I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox. How can I delete unwanted, expired, builtin certificate? Thanks. Firefox 52.9 ESR. OS: Windows XP SP3.

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can't remove builtin certificate, you can only remove all the trust bits via Edit if you really want to disable this certificate. If the certificate is expired then Firefox won't use it anyway. Builtin certificates are stored in a file in the Firefox program folder and cert9.db in the profile folder stores the data if you would distrust the certificate.