Delete builtin certificate
Hello.
I want to delete certificate "GeoTrust Global CA 2" that expired on 2019-03-04. This certificate is located in the Security Device "Builtin Object Token".
I tried to delete this certificate via settings (about:preferences#advanced -> View Certificates -> Delete or Distrust...). The certificate has been removed. But the certificate appeared again at the opening of these settings.
I tried to delete this certificate via "NSS Security Tools" with such command certutil.exe -D -d "D:\MyProgs7\FirefoxPortable52.9ESR\Data\profile" -n "GeoTrust Global CA 2" But the certificate appeared again after restarting Firefox.
How can I delete unwanted, expired, builtin certificate?
Thanks.
Firefox 52.9 ESR.
OS: Windows XP SP3.
Krejt Përgjigjet (1)
You can't remove builtin certificate, you can only remove all the trust bits via Edit if you really want to disable this certificate. If the certificate is expired then Firefox won't use it anyway. Builtin certificates are stored in a file in the Firefox program folder and cert9.db in the profile folder stores the data if you would distrust the certificate.