This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Default certificate database

  • 4 replies
  • 0 have this problem
  • 7 views
  • Last reply by Robb995

Robb995
Robb995
more options

My Firefox installation is several years old. As I peruse the Certificate database there are some that I have concerns about, however I have no way of knowing whether they are part of Firefox's default certificate database or were somehow added later. So, two (2) questions.

1. How can I replace the current certificate database with Firefox's current default database?

2. Is there somewhere a list of what certificate authorities are included in the default database?

Thank you in advance.

My Firefox installation is several years old. As I peruse the Certificate database there are some that I have concerns about, however I have no way of knowing whether they are part of Firefox's default certificate database or were somehow added later. So, two (2) questions. 1. How can I replace the current certificate database with Firefox's current default database? 2. Is there somewhere a list of what certificate authorities are included in the default database? Thank you in advance.

All Replies (4)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can rename/remove cert9.db in the Firefox profile folder to reset all changes made to certificates.

Closest for a list of built-in root certificates is probably this file:

Robb995
Robb995 Question owner
more options

I'll give it a try. Thank you for the quick response!

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

If you have a cert_override.txt, remove this file as well.

Robb995
Robb995 Question owner
more options

I have the file, but the only thing in it is:

  1. PSM Certificate Override Settings file
  2. This is a generated file! Do not edit.