For example:
1. Certificate "CA.A" is trusted by firefox by default.
2. Certificate "CA.B" is issued by certificate "CA.A", but not stored in firefox by default.
3. Websi… (read more)
For example:
1. Certificate "CA.A" is trusted by firefox by default.
2. Certificate "CA.B" is issued by certificate "CA.A", but not stored in firefox by default.
3. Website "WWW.C" use a certificate "CA.C" which is issued by certificate "CA.B"
4. After I visit "WWW.C", firefox will report it is a secure connection and will add "CA.B" to "Certificate Manager".
Now I want to untrust "CA.B" and all certificate issued by it.
In firefox old release(like firefox 45), there is an "Import" option in "Certificate Manager"->"Servers", I can import "CA.B" to untrust the certificate.
In firefox new release(like firefox 112), there is no "Import" option in "Certificate Manager"->"Servers", so I can not untrust "CA.B".
I have also try to untrust the certificate in "Certificate Manager"->"Authorities"-"Edit Trust", but uncheck the checkbox can't untrust the certificate and firefox still report it is a secure connection when I visit "WWW.C".