PKI Tutorials - Herong's Tutorial Examples - v2.20, by Dr. Herong Yang
Deleting Root CA Certificates from Mozilla Firefox
This section provides a tutorial example on how to delete a certificate from Mozilla Firefox. Deleted certificate can be re-installed back from a certificate file.
As you can see from the previous tutorial, the list of trusted root CA certificates in Firefox is quite long. It contains many root CA certificates you are probably never going to use them. If you want to, you can delete root CA certificates that are not needed from Mozilla Firefox.
Here is what I did on Mozilla Firefox to delete the "VeriSign Class 3 Public Primary Certification Authority - G5" certificate, which is actually needed to validate the login.yahoo.com certificate. But I can delete it, because I have exported it to a file already.
1. Repeat steps listed in the previous tutorial until you see the Certificate Manager dialog box.
2. Go to the Authorities tab and select "DigiCert High Assurance EV Root CA".
3. Click the "Delete or Distrust" button, A warning message box shows up:
5. Read the warning message and click "OK":
You have requested to delete these CA certificates. For built-in certificates all trust will be removed, which has the same effect. Are you sure you want to delete or distrust? DigiCert High Assurance EV Root CA If you delete or distrust a certificate authority (CA) certificate, this application will no longer trust any certificates issued by that CA.
6. Close Mozilla Firefox.
The "VeriSign Class 3 Public Primary Certification Authority - G5" certificate is deleted from Mozilla Firefox now.
Table of Contents