Deleting Root CA Certificates from Mozilla Firefox

This section provides a tutorial example on how to delete a certificate from Mozilla Firefox. Deleted certificate can be re-installed back from a certificate file.

As you can see from the previous tutorial, the list of trusted root CA certificates in Firefox is quite long. It contains many root CA certificates you are probably never going to use them. If you want to, you can delete root CA certificates that are not needed from Mozilla Firefox.

Here is what I did on Mozilla Firefox to delete the "VeriSign Class 3 Public Primary Certification Authority - G5" certificate, which is actually needed to validate the login.yahoo.com certificate. But I can delete it, because I have exported it to a file already.

1. Repeat steps listed in the previous tutorial until you see the Certificate Manager dialog box.

2. Go to the Authorities tab and select "DigiCert High Assurance EV Root CA".

3. Click the "Delete or Distrust" button, A warning message box shows up:

Delete Root CA certificates - Mozilla Firefox
Deleting Root CA Certificates in Mozilla Firefox

5. Read the warning message and click "OK":

You have requested to delete these CA certificates. For built-in
certificates all trust will be removed, which has the same effect.
Are you sure you want to delete or distrust?

DigiCert High Assurance EV Root CA

If you delete or distrust a certificate authority (CA) certificate,
this application will no longer trust any certificates issued by that
CA.

6. Close Mozilla Firefox.

The "VeriSign Class 3 Public Primary Certification Authority - G5" certificate is deleted from Mozilla Firefox now.

Table of Contents

 About This Book

 Introduction of PKI (Public Key Infrastructure)

 Introduction of HTTPS (Hypertext Transfer Protocol Secure)

 Using HTTPS with Google Chrome

Using HTTPS with Mozilla Firefox

 Visiting "https" Website with Mozilla Firefox

 Viewing Server Certificate in Mozilla Firefox

 Server Certificate General Information

 Viewing Server Certificate Path in Mozilla Firefox

 Exporting Server Certificate to File in Mozilla Firefox

 Viewing Pre-Installed Certificates in Mozilla Firefox

 Listing of Trusted Root CA in Mozilla Firefox

 Exporting Certificate to File from Mozilla Firefox

Deleting Root CA Certificates from Mozilla Firefox

 Mozilla Firefox Displaying Certificate Error Page

 Adding Security Exception in Mozilla Firefox

 Failing to Import Root CA Certificates to Mozilla Firefox

 Certificate Trust Settings in Mozilla Firefox

 HTTPS with Microsoft Edge

 Using HTTPS with Apple Safari

 HTTPS with IE (Internet Explorer)

 Android and Server Certificate

 iPhone and Server Certificate

 Windows Certificate Stores and Console

 RDP (Remote Desktop Protocol) and Server Certificate

 macOS Certificate Stores and Keychain Access

 Perl Scripts Communicating with HTTPS Servers

 PHP Scripts Communicating with HTTPS Servers

 Java Programs Communicating with HTTPS Servers

 .NET Programs Communicating with HTTPS Servers

 CAcert.org - Root CA Offering Free Certificates

 PKI CA Administration - Issuing Certificates

 Comodo Free Personal Certificate

 Digital Signature - Microsoft Word

 Digital Signature - OpenOffice.org 3

 S/MIME and Email Security

 PKI (Public Key Infrastructure) Terminology

 Outdated Tutorials

 References

 Full Version in PDF/EPUB